kaidokert / krabiecdsa-rs / 29214724734

94%

Build Type

push

github

Committed by web-flow

Commit Message

RFC 6979 deterministic nonces (experimental signing) (#17)

* RFC 6979 deterministic nonces (experimental signing)

Adds the HMAC-DRBG of RFC 6979 §3.2 so signing no longer takes a
caller nonce: dangerous::sign_prehashed(private_key, digest) derives k
deterministically, killing the reuse/bias footgun that made the POC
dangerous by construction. dangerous::derive_nonce_rfc6979 exposes the
nonce alone so it can be checked directly against the RFC. The
lower-level sign_prehashed_with_k stays as the tested primitive.

Coverage Stats

97 of 107 new or added lines in 1 file covered. (90.65%)

10 existing lines in 1 file now uncovered.

417 of 438 relevant lines covered (95.21%)

35497.13 hits per line