Tag
nonce-reuse
- Oct 22, 2025 Page-Level Encryption: Nonces, MACs, and the Cost of Decrypting Every Read How an embedded database encrypts individual pages with a per-page nonce and a per-page MAC, what that costs in usable page space, and why the key cache is the real attack surface. mobile computing
- May 19, 2025 Recovering the GCM Authentication Key from a Repeated Nonce Two messages encrypted under the same GCM nonce turn the tag difference into a polynomial in the hash subkey, whose roots yield the key and permit arbitrary forgery. cryptography
- Feb 8, 2025 Signature Nonces: The Single Secret That Breaks ECDSA How the per-signature nonce turns a signature equation into a solvable linear system when it repeats or leaks, and how deterministic derivation removes the randomness requirement. cryptography
- Jul 15, 2024 ECDSA Nonce Reuse and the Private Key It Leaks A repeated signing nonce turns two signatures into a linear system that yields the private key, and biased nonces are nearly as bad because lattice reduction tolerates noise. cryptography