ECDSA vulnerabilities