🚨 Critical private key vulnerability found in secp256k1-node.
Attackers can retrieve private keys using low-order curve points through only 11 ECDH sessions.
NVK (npub1az9…m8y8) and Paul (npub1p4k…cxf8) discuss the vulnerability in BR087.
BitcoinReview / Bitcoin.Review
npub1qd…pzclt
2024-11-16 23:10:23
Author Public Key
npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzcltPublished at
2024-11-16 23:10:23Event JSON
{
"id": "2de91e3b56d402db4fe040766451e9a6d5376e8a35d1d35a46373d1fa4d4404c",
"pubkey": "0371db7fd4437ce63e60dedc313cad6ee8b17fc691fe05231f9a140134fc0d08",
"created_at": 1731798623,
"kind": 1,
"tags": [
[
"p",
"e88a691e98d9987c964521dff60025f60700378a4879180dcbbb4a5027850411"
],
[
"p",
"0d6c8388dcb049b8dd4fc8d3d8c3bb93de3da90ba828e4f09c8ad0f346488a33"
]
],
"content": "🚨 Critical private key vulnerability found in secp256k1-node.\n\nAttackers can retrieve private keys using low-order curve points through only 11 ECDH sessions.\n\nnostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 and nostr:npub1p4kg8zxukpym3h20erfa3samj00rm2gt4q5wfuyu3tg0x3jg3gesvncxf8 discuss the vulnerability in BR087.\nhttps://m.primal.net/MYRP.mov",
"sig": "484dc17f41e69896c22f60858a1a3346634fa1896d3dda3d65a04aa0a404ce7b2092368d77fe27506d693600d7e56faace42ef0e2d2748c3429954e80c67c5e8"
}