nonce-reuse

This repository implements a Python function that recovers the private key from two different signatures that use the same random nonce during signature generation.

ECDSA nonce-reuse attack to recover a private key.

ECDSA signature vulnerability analysis — nonce reuse, polynonce, biased nonces, lattice/HNP attacks

This guide provides a complete, error-free implementation of a high-performance Bitcoin ECDSA vulnerability scanner in C++ for Ubuntu Linux. The scanner efficiently detects R-value reuse vulnerabilities while minimizing API calls.

This is the latest version

AES-CTR nonce-reuse crypto CTF challenge — recover the flag from a captured session. Solution write-up included, encrypted with the flag as passphrase.

Browser-based ECDSA demo on secp256k1 and P-256 — sign/verify, live nonce reuse attack with full private key recovery (the PS3 hack, real math), RFC 6979 deterministic nonces verified against test vectors. The signature algorithm behind TLS, Bitcoin, Ethereum, SSH, and WebAuthn. No backends. No simulated math.

Browser-based AES-GCM vs AES-GCM-SIV comparison — live nonce reuse attack showing keystream XOR recovery and GHASH key extraction, synthetic IV construction visualizer, and side-by-side misuse-resistance comparison. RFC 8452. Part of crypto-lab.

Browser demo: one nonce reused under one key across CTR, AES-GCM, ChaCha20-Poly1305, and CBC — four constructions, four different catastrophes, none graceful.

Browser-based Schnorr signature demo — BIP-340. Sign and verify over secp256k1, then reuse one nonce across two messages and watch the private key fall out by algebra. Real curve arithmetic. No backend.

Browser-based ChaCha20 stream cipher — quarter-round stepper, keystream visualizer, nonce reuse attack demo, and encrypt/decrypt playground. ARX design, no AES-NI required. Part of crypto-lab.

Bitcoin-ECDSA-Vulnerability-Scanner-with checkpoint and saving option

Answer questions about the Bitcoin timechain out of your own node. Local artifacts, deterministic fingerprints, no third-party index.

Browser-based entropy failure demo — NIST SP 800-90B. DRBG Arena teaches how the generator works; this asks where the seed came from. Snapshot a VM, restore two copies, watch both emit the same session key from an honest, uncompromised, correct DRBG. Fork inheritance, silent reseed failure, and the upstream cause of every nonce-reuse attack.