Browse Source
This is a bug with security implications. It is much easier to guess the value of k within a 64 byte range. This would lead to compromised private keys. The cryptography interface of bitcore is extremely poor. I recommend: * Get rid of the C++ code, since it makes everything more difficult with little benefit * Refactor all crypto, and have easily auditable bignum, point, ecdsa, and key classes * Then actually audit the cryptopatch-2
Ryan X. Charles
11 years ago
1 changed files with 2 additions and 1 deletions
Loading…
Reference in new issue