[Resource Topic] 2019/023: Biased Nonce Sense: Lattice Attacks against Weak ECDSA Signatures in Cryptocurrencies

Welcome to the resource topic for 2019/023

Title:
Biased Nonce Sense: Lattice Attacks against Weak ECDSA Signatures in Cryptocurrencies

Authors: Joachim Breitner, Nadia Heninger

Abstract:

In this paper, we compute hundreds of Bitcoin private keys and dozens of Ethereum, Ripple, SSH, and HTTPS private keys by carrying out cryptanalytic attacks against digital signatures contained in public blockchains and Internet-wide scans. The ECDSA signature algorithm requires the generation of a per-message secret nonce. If this nonce is not generated uniformly at random, an attacker can potentially exploit this bias to compute the long-term signing key. We use a lattice-based algorithm for solving the hidden number problem to efficiently compute private ECDSA keys that were used with biased signature nonces due to multiple apparent implementation vulnerabilities.

ePrint: https://eprint.iacr.org/2019/023

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .