3 ms·
Hmhm. Why do they use their own (by which i mean, 'custom') elliptic curve implementation (in pure python - what about timing / side channel attacks?) https://
by wfn 12y ago
Hmhm. Why do they use their own (by which i mean, 'custom') elliptic curve implementation (in pure python - what about timing / side channel attacks?)
https://github.com/darkwallet/darkmarket/blob/master/ecdsa/ellipticcurve.py https://github.com/darkwallet/darkmarket/blob/master/ecdsa/e...
https://github.com/darkwallet/darkmarket/blob/master/ecdsa/numbertheory.py https://github.com/darkwallet/darkmarket/blob/master/ecdsa/n...
Would be nice to see some kind of design paper, threat model, etc. Of course a PoC is supposed to be a PoC - good for them, for releasing code that works :) but, people might end up using it and trusting it. So gotta ask those questions.