CVE-2019-18222: ECDSA Nonce Recovery Data and Tooling

A dataset and software tool for reproducing research results related to the CVE-2019-18222 vulnerability. It contains JSON files with blinded nonce candidates and ECDSA signature data, including ground truth keys and signatures for the P-256 curve. The dataset was created by Alejandro Cabrera Aldaya of Tampere University and is available under an Open Access license.

Use Cases

• Reproducing cryptographic attack results based on the provided ECDSA signature data.
• Testing nonce enumeration algorithms using the supplied list of blinded nonce candidates.
• Benchmarking factorization tools against the large integer factors present in the nonce candidate data.
• Studying the structure of ECDSA signatures for the P-256 curve based on the provided JSON fields.

Strengths

• Includes ground truth ECDSA keys and nonces for verification of results.
• Provides a specific software tool (`enum`) for reproducing the research methodology.
• Data is structured in JSON format with documented fields for signatures and candidates.

Limitations

• Row count and dataset size are unknown, which may limit suitability assessment.
• Column-level documentation is absent; field semantics must be inferred from the description.
• Last update date is unknown; freshness unverified.

Provenance

Source

Alejandro Cabrera Aldaya, Tampere University

Collection Method

Created for reproducing research results related to CVE-2019-18222.