LadderLeak: Breaking ECDSA with Less than One Bit of Nonce Leakage 

Although one of the most popular signature schemes, ECDSA presents a number of implementation pitfalls, in particular due to the very sensitive nature of the random value (known as the nonce) generated during the signing algorithm. It is known that any small amount of nonce exposure or bias...
By: Diego De Freitas Aranha & Akira Takahashi
Full Abstract & Presentation Materials:
www.blackhat.c...