提高签名生成的安全性
作者: paulmillr创建于 2024年11月19日更新于 2026年5月26日
标签discussionon-deckv6
Recent Elliptic.js CVE highlighted a danger of fault attacks. Check out the blog post: Deterministic signatures are not your friends and ethresear.ch post. Deterministic RFC6979 signatures are good, however, if an error happens during sig generation, then the error is propagated to the very end. In worst cases, it will mean k reuse and private key leakage.
内容来源: ethers-io/ethers.js