Lery

3 ms·

1. 1.▲
   by Lery 9y ago

   When signing the same message, all EdDSA implementations are supposed to reuse the same `r`, as per RFC 8032, and thus to produce the same signature under the same key. For smartphone and instant messaging, I wouldn't be worried about
2. 2.▲
   by Lery 9y ago

   You seems to have read the second paper which got published on the same topic shortly after this work was presented at FDTC. However both papers are about the same kind of fault attacks. And since you mention playing around, the first paper
3. 3.▲
   by Lery 9y ago

   You don't really want to verify the signature you've just generated, if you care about perf, because verification is twice as costly as signing.