Re: pending Bitcoin/Android CVE assignments

[Florent Daigniere <florent.daigniere () trustmatta com>]

On Mon, 2013-08-12 at 12:41 -0400, cve-assign () mitre org wrote:
> https://code.google.com/p/bitcoin-wallet/source/detail?name=bitcoinj-0.10&r=04d2044880d88107ee4a939a516fb4be4cedeaf9#


That looks like the wrong fix to me. Surely if the assumption is that
the application will be used on a large number of heterogeneous embedded
devices (with inconsistent software stacks), where random sources are
unsuitable for cryptographic usage, the solution should not involve
them.

Why can't bincoin use deterministic signatures again?
https://tools.ietf.org/html/rfc6979

Florent

Attachment: signature.asc
Description: This is a digitally signed message part