cryptoPromedium

Chill

volgactf

Task: DSA scheme where private key x = flag, two signatures with nonces differing by at most 2^22. Solution: close nonce attack — derive linear equation in x with small unknown delta, brute-force ~4M delta values checking for VolgaCTF{} prefix.

$ ls tags/ techniques/
dsa_close_nonce_attackmodular_arithmetic_brute_forcesignature_equation_manipulation

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups