How to defeat Ed25519 and EdDSA using faults
We've succesfully conducted a fault attack against EdDSA that allowed us to recover enough secret key material to produce fake signatures for any message in a way a verifier cannot detect.