3 ms·
> DSS: fine With the caveat that DSA fails exceptionally catastrophically if the random number generator is bad. If you re-use the same random number for diff
by agwa 13y ago
> DSS: fine
With the caveat that DSA fails exceptionally catastrophically if the random number generator is bad. If you re-use the same random number for different signatures, an attacker can recover the private key. Given how subtle RNG bugs can be, it's probably imprudent to choose it over RSA.
- tptacek 13y agoThat's true of ECDSA as well, and, in a larger sense, true of RSA --- the "Minding Your P's and Q's" research seemed to boil down to an RNG weakness. It is also, for what it's worth, largely true of all the modern AEAD modes.