kaidokert / krabiecdsa-rs / 31340340991

93%

Build Type

push

github

Committed by web-flow

Commit Message

Scalar blinding for the randomized signer (completes blinded signing) (#39)

* Scalar blinding for the randomized signer (completes blinded signing)

The randomized signer already randomized the projective coordinates each
signature; it still fed the raw nonce to the ladder, leaving the scalar
processing open to DPA/CPA on the multiplier. Draw a 64-bit random `r`
alongside the hedge entropy and λ, and multiply by `k' = k + r·n` instead
of `k`. Since `n·G = O`, `k'·G = k·G`, so the signature is bit-identical,
but the ladder now runs on a different, wider scalar each signature. `s`
still uses the true nonce `k` (`k' ≡ k mod n`).

Coverage Stats

58 of 75 new or added lines in 1 file covered. (77.33%)

1 existing line in 1 file now uncovered.

979 of 1034 relevant lines covered (94.68%)

17235.38 hits per line