Several Bitcoin wallet applications have been upgraded following a serious cryptography problem in Android that could allow attackers to steal the virtual currency.
Four Android Bitcoin clients—Bitcoin Wallet, Blockchain, Mycelium Bitcoin Wallet and BitcoinSpinner—have been fixed, according to an updated notice on Bitcoin.org.
The problem affects Bitcoin applications that rely on an Android component, the Java SecureRandom class, that generates random numbers. Those numbers are used to create transaction signatures that are recorded in the blockchain, which is the public ledger of Bitcoin transfers.
In some cases, the supposedly random numbers were the same for different transactions, which could allow an attacker to determine someone's private key and steal their bitcoins.
To read this article in full or to leave a comment, please click here
ConversionConversion EmoticonEmoticon