OSC-2026-0019 · github.com/rust-bitcoin/rust-secp256k1
none-found clean-run grok-4.5 2026-08-04 signed: nostr
- Repository
- github.com/rust-bitcoin/rust-secp256k1
- Commit
- 9fc86f756f0cd24a5167c131551b31b748c8cdb3
- Scope path
- src/ecdsa/mod.rs
- Model
- grok-4.5
- Harness
- grok-build
- Prompts
- prompts/entropy-rng-audit-v1.md
- Independent runs
- 1
- Transcript sha256
- a84c59ac0a8552d15bb69684e3b9cf10c5e6f41b107ff4346fd0b7428ddbfcf4
- Auditor
- TheIcarusWings (theicaruswings)
- Signature
- nostr-schnorr · npub19tzp8lf3klmqj3dz9mz0qnuvjp7uyy9993gmljmyaxs8phztj7wsnujvq5
Scope. Independent Grok re-audit of ECDSA nonce selection in rust-secp256k1 bindings at 9fc86f75. In scope: nonce function selection, optional extra entropy as ndata, silent weak fallback. NOT: libsecp256k1 C correctness, Schnorr, ECDH, keygen. Cross-model counterpart to OSC-2026-0007.
Findings
none-found OSC-2026-0019-F1 unreviewed
No weakness found. ECDSA signing entry points pin ffi::secp256k1_nonce_function_rfc6979 explicitly (src/ecdsa/mod.rs:249 and :302). Optional noncedata is RFC6979 ndata only. No silent weak-nonce fallback in the Rust ECDSA surface. Agreement with OSC-2026-0007.
src/ecdsa/mod.rs:228-302