4 ms·
these days he's more famous for the NaCl crypto library
by slim 6y ago
these days he's more famous for the NaCl crypto library
- loup-vaillant 6y agoFor which bit flips are even more relevant: EdDSA has this nasty tendency of leaking the private key if the wrong bits are flipped (there are papers on fault injection attacks). People who sign lots of stuff all the time, say Let's Encrypt, could conceivably gain some piece of mind with ECC. (Note: EdDSA is still much much better than ECDSA, most notably because it's easier to implement correctly.)