4 ms·
Something else. If you're expecting a curve with 2^250 ish possible resultant values, and you perform a calculation on a curve with only 2^13 ish possible valu
by sarciszewski 12y ago
Something else.
If you're expecting a curve with 2^250 ish possible resultant values, and you perform a calculation on a curve with only 2^13 ish possible values, you're going to leak some information about the number you gave it.
The ECC Hacks talk by Dan Bernstein and Tanja Lange explains it better than I can.
- fryguy 12y agoreferenced talk: https://www.youtube.com/watch?v=l6jTFxQaUJA https://www.youtube.com/watch?v=l6jTFxQaUJA
- sarciszewski 12y agoThank you for providing the link :)