ECDSA is relatively strong in security when implemented correctly, but is extremely sensitive to the quality of the random number k; if k is reused or is predictable, an attacker can recover the private key from a small number of signature samples.