2 ms·
ECC also depends on good RNG for computing signatures. RSA needs it only at key creation time.
by rini17 6y ago
ECC also depends on good RNG for computing signatures. RSA needs it only at key creation time.
- nmadden 6y agoThis is not necessarily true - deterministic EC signatures are now recommended, eg EdDSA or [1] for ECDSA. (To prevent some side-channel attacks you might want to reintroduce some randomness). On the other hand, it’s now recommended to use PSS padding with RSA, which requires a random value for each signature. [1]: https://tools.ietf.org/html/rfc6979 https://tools.ietf.org/html/rfc6979