Wonteet Zebugs
· 5d
Obviously nobody can really know, but if you had to guess, which of these two types of attacks would you say is more likely?
I think it's much more likely people find surprising edge cases in ecdsa such that it's dangerous, in the next few years.
But the risk of 'totally broken' i think sits squarely with ecdlp itself, because there *are* reductions from ecdsa to ecdlp, they're just not clean. So I guess different kinds of risk, but, again, I obviously am 99% just guessing.