1. 37
    1. 2

      Ouch, this is a serious vulnerability which compromises the private key. Fortunately the only affected key type is 521-bit ECDSA and not Ed25519.

      1. 2

        This thread about it on HN with tptacek is a good read for anyone who finds this kind of bug interesting.