Kleptographic Attacks on Elliptic Curve Signatures

摘要

This paper presents an approach to mount secretly embedded trapdoor with universal protection (SETUP) attacks on elliptic curve signatures. The attacked signature is the elliptic curve digital signature algorithm ECDSA. The attacker can obtain the user's private key covertly. The cryptographic black-box devices with this hidden trapdoor behave exactly like an honest devices while actually leaking the key to the attacker only. The paper also shows how to use ECDSA for encryption and key exchange.