ECDSA vulnerability