Pocket CTFInsane
ReferenceSwitch trackNonce Encore
A toy DSA signer issued two signatures with the same r value. Recover the private signing key using modular arithmetic.
Fetch the complete public transcript from /api/insane/nonce, then POST private_key=<decimal> to /api/insane/nonce/recover.