Whoops, @Yubico just scored 31% on the Sony PS3 Epic Fail scale. Collect three signatures from a FIPS Yubikey and you can calculate the private key.https://www.yubico.com/support/security-advisories/ysa-2019-02/ …
-
That wasn't my read of it. My read is that during key generation 80 bits are static (left over from boot POST memory content). I don't think collecting any number of sigs/pubkeys will help leak the non-static bits.
80 bits of the random nonce are static during ECDSA *signature* generation too, not just key generation, and *that* leaks the whole key (regardless of how it was generated) after just a few signatures. See the stackexchange that was leaked earlier.
