Random Reuse

风险说明

随机数复用可能导致密钥泄漏等高风险后果。

攻击案例

• Samsung shipped ‘100 million’ phones with flawed encryption

• iPhone hacker publishes secret Sony PlayStation 3 key

• Polynonce: A Tale of a Novel ECDSA Attack and Bitcoin Tears

合规建议

• 禁止随机数复用。

• 通信双方应各自独立生成安全随机数。

参考资料

• Trust Dies in Darkness: Shedding Light on Samsung’s TrustZone Keymaster Design

• Key Discovery in ECDSA: Understanding Implementation and Security Risk

• ECDSA Nonce Reuse Attack