Damus
waxwing · 6d
I think it's much more likely people find surprising edge cases in ecdsa such that it's dangerous, in the next few years. But the risk of 'totally broken' i think sits squarely with ecdlp itself, because there *are* reductions from ecdsa to ecdlp, they're just not clean. So I guess different kinds ...