Generalized attack on ECDSA: known bits in arbitrary positions

DOI10.1007/S10623-023-01269-7MaRDI QIDQ6063142zbMATH OpenOpenAlexFDO

Authors Jinzheng Cao, Jian Weng, Yanbin Pan, Qingfeng Cheng

Publication date 7 November 2023

Published in Designs, Codes and Cryptography (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1007/s10623-023-01269-7

zbMATH Keywords

ECDSAextended hidden number problemlatticeside-channel attack

Mathematics Subject Classification ID

Number-theoretic algorithms; complexity (11Y16) Cryptography (94A60)

Recommendations

• scientific article; zbMATH DE number 1848387
• The insecurity of the elliptic curve digital signature algorithm with partially known nonces
• A tale of three signatures: practical attack of ECDSA with wNAF
• Attacking ECDSA leaking discrete bits with a more efficient lattice
• Attacking (EC)DSA given only an implicit hint

Cites work

• A tale of three signatures: practical attack of ECDSA with wNAF
• Advanced lattice sieving on GPUs, with tensor cores
• Better key sizes (and attacks) for LWE-based encryption
• Biased nonce sense: lattice attacks against weak ECDSA signatures in cryptocurrencies
• BKZ 2.0: Better lattice security estimates
• Extended Hidden Number Problem and Its Cryptanalytic Applications
• Factoring RSA moduli with primes sharing bits in the middle
• Hardness of computing the most significant bits of secret keys in Diffie-Hellman and related schemes
• scientific article; zbMATH DE number 1962809 (Why is no real title available?)
• scientific article; zbMATH DE number 1859030 (Why is no real title available?)
• scientific article; zbMATH DE number 1418307 (Why is no real title available?)
• Improved progressive BKZ algorithms and their precise cost estimation by sharp simulator
• Lattice-based Cryptography
• LWE with side information: attacks and concrete security estimation
• On bounded distance decoding with predicate: breaking the ``lattice barrier for the hidden number problem
• Practical, Predictable Lattice Basis Reduction
• Predicting Lattice Reduction
• Revisiting the expected cost of solving uSVP and applications to LWE
• Shortest vector from lattice sieving: a few dimensions for free
• The general sieve kernel and new records in lattice reduction
• The insecurity of the elliptic curve digital signature algorithm with partially known nonces
• The LLL algorithm. Survey and applications

Cited in

(2)

• Attacking ECDSA leaking discrete bits with a more efficient lattice
• The curious case of the half-half Bitcoin ECDSA nonces

This page was built for publication: Generalized attack on ECDSA: known bits in arbitrary positions

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q6063142)