security
답변 읽기How do you derive the private key from two signatures that share the same k value?
ECDSA signatures are pairs (r,s) where r=(k*G).x mod n, and s = (m + r*x)/k mod n, where x is the secret key, k is the random nonce, and m is the message. If you have two s values s1 and s2 …