Unverified50% confidenceFactExact time
ECDSA is relatively strong in security when implemented correctly, but is extremely sensitive to the quality of the random number k; if k is reused or is predictable, an attacker can recover the private key from a small number of signature samples.
1
Sources
50%
Confidence
Long-term
Relevance
9/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIf malware obtains sufficiently high privileges on a device, it is theoretically still possible to exploit the private key locally in real time to perform signing, but this requires remaining persistently active and proxying every verification request, which greatly increases attack complexity.69% similarUnverifiedTiming side-channel attacks can recover private keys bit by bit through precise timing of a large number of cryptographic operations combined with statistical methods; examples include the Bleichenbacher attack against OpenSSL RSA and the Cache-Timing attack against AES lookup tables.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/929872API
curl https://kongchang.com/api/v1/knowledge/claims/929872MCP
get_claim(id=929872)