
I was going through the 2010 Sony PS3 hack today and came across something pretty wild. Sony was using ECDSA to sign software, but they reused the same random nonce k for different signatures. That tiny implementation mistake was enough to recover their private signing key. The Hackers didn’t break ECDSA or brute-force anything they just reused one number that was supposed to be random 😭 It’s a good reminder that in cryptography, the math can be perfectly secure and the implementation can still break everything
