3 ms·
You don't even have to re-use a k value - if the attacker can guess your k value, one signature is enough to recover your private key.
by caf 12y ago
You don't even have to re-use a k value - if the attacker can guess your k value, one signature is enough to recover your private key.