misc icon indicating copy to clipboard operation
misc copied to clipboard
verified publisher icon gluk256

Extends Signidice algorithm: introduced secret user-related component

Open sebres opened this issue 7 years ago • 0 comments

Extends Signidice algorithm: introduced secret user-related component HR of the future PRNG-calculation.

Closes the algorithm vulnerability during signing process of casino S = sign(PrivKey, V), with help of own-calculated quasi-random padding inside, in order to generate predicted lucky number L previously depending on value of S only.

See https://github.com/pertsev/web3_utilz/tree/master/ECDSA%20signature%20generating%20%28cheating%29

Because all participants now have the components, that are unknown for any others until end of the round, no matter which algorithm used for the creation of signature S now, the prediction resp. the impact of casino (as well as players) to the result of future PRNG calculation is impossible, until all the players disclose the secret component HR.

sebres avatar Feb 12 '18 18:02 sebres