Oddbean new post about | logout
 Signature can leak the private key to an attacker via the nonce :)