Whoops, @Yubico just scored 31% on the Sony PS3 Epic Fail scale. Collect three signatures from a FIPS Yubikey and you can calculate the private key.https://www.yubico.com/support/security-advisories/ysa-2019-02/ …
-
Do I understand correctly that if deterministic signature algorithm was chosen, this problem wouldn't be that huge?
-
-
Oh, people never learn...
-
To be fair, Yubico doesn't get to pick what curves they need to implement for a given standard.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.