Giter VIP home page Giter VIP logo

unsafeecc's Introduction

Unsafe ECC

Proof of concept and explainers to ECC vulnerabilities. It doesn't just tell you "Don't do this, it is exploitable. Do this rather', it also shows you how exactly it's exploitable and how the formula is derived.

Includes

  • Nonce reuse: Covers how, given two signatures s1 and s2 of messages m1 and m2 respectively, signed by a private key p whose public key is q, a malicious actor can calculate and get p using just s1, s2, m1 and m2
  • Nonce Leak: Covers how, given a signature s of message m, signed using nonce k by a private key p whose public key is q, a malicious actor can calculate and get p using just s, m, and k
  • Fake signatures : Covers how, given a private key p and a public key q, a malicious actor can generate a signature and message pair that recovers to q without the exploiter knowing or having access to p
  • Signature malleability: Covers how given a signature (v, r and s) of message m signed by private key p whose public key is q, a malicious actor can subtract s from the order of the curve and flip v to 27 if it's 28 or 28 if it's 27 to get a new signature that recovers to q (no need to have access to p)

unsafeecc's People

Contributors

amadimichael avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.