According to a presentation made at the 27th Chaos Communication Congress, there is a serious bug in the code that was used to produce ECDSA signatures for the PS3: the same secret random was reused in several signatures, which allowed the team to recover the private key from signatures.
The relevant part of the presentation starts at 5'15" in http://www.youtube.com/watch?v=84WI-jSgNMQ Francois Grieu _______________________________________________ cryptography mailing list [email protected] http://lists.randombit.net/mailman/listinfo/cryptography
