Concerning the broad subject of cryptography and its narrow application in Bitcoin protocol and applications.

learn more… | top users | synonyms

6
votes
1answer
116 views

What level of mathematical understanding do I need in order to contribute or to understand the crypto behind bitcoin?

My mathematical knowledge is up to CALC II (college level.) Is this enough mathematical maturity in order to understand the crypto in bitcoin or do I need more knowledge? If I do indeed need more ...
0
votes
1answer
45 views

Getting bitcoin globe data

I just saw this bitcoin globe https://blockchain.info/nodes-globe?series=topBlockRelay It has two modes,"Online Now" and "Miners". I wanted to ask if anyone knows what the bars and colors stand for ...
3
votes
2answers
53 views

ECDSA: (v, r, s), what is v?

Deterministically signing a Tx with RFC6979 returns v, r, s, where r and s are the 2 values used in standard ECDSA signatures. v = 27 + (y % 2), so 27 + the parity of r, as pybitcointools indicates. ...
1
vote
0answers
46 views

Is it possible to discover the set of bitcoin addresses from a public key?

I'm trying to find the set of bitcoin addresses from a public key associated with a user just to analyse this user transaction. Is there any way to derive/find all the addresses that have been ...
1
vote
1answer
62 views

Ramifications of creating Electrum 2.x seeds which are not BIP39

Electrum 2.0 seeds (mnemonic phrases) are created with a checksum based algorithm (such that the hmac_sha512 starts with 01. It's usually a 13 word seed, but can be 12 in some circumstances. If all ...
0
votes
1answer
27 views

Authentication and key distribution in bitcoin

After going through the bitcoin protocol documentation it is still unclear to me how the bitcoin client is authenticated. Where can I find an overview of what the client sends and receives on the wire ...
1
vote
1answer
33 views

Electrum 2 validation: how is the HMAC always 01…?

Electrum version 2 creates a seed from a random number which is then encoded as a mnemonic. The seed is validated by checking that the hmac begins with the bytes 01 or 101 for standard and 2fa types, ...
1
vote
1answer
85 views

HMAC “Bitcoin Seed” for BIP32

Pybitcointools uses the following code for calculating a master private key (BIP32) from a seed: def bip32_master_key(seed, vbytes=MAINNET_PRIVATE): I = hmac.new(from_string_to_bytes("Bitcoin ...
0
votes
0answers
78 views

Error While making windows.exe using gitian build?

Actually I'm making a logos windows exe (logosd and logos-qt) following the release process, which is mention on below path on any coin you can find that path, I'm working logos LGS Coin that's why ...
-1
votes
1answer
82 views

How do I create release build of my new bitcoin wallet?

I have created a new alt coin, and now I want to create a executable of my wallet in ubuntu. I don't know how to create a release build wallet with all its dependencies. How I can build my wallet ...
0
votes
0answers
40 views

Signing data with a namecoin private key?

Consider the following scenario User A stores an image on a DHT and receives a SHA-256 hash in return. User A wants to prove ownership of the data has, so he registers a username on the namecoin ...
4
votes
1answer
220 views

Problems with deterministic ECDSA based on RFC6979 in Bitcoin

Generating random number k in elliptic curve is crucial and in any transactions signature in Bitcoin, random number k is required to compute a point k*G. If this k is chosen not randomly, it instantly ...
1
vote
2answers
116 views

How to generate a Litecoin Private key and correspondent Public Address in C#

I found this C# tool to generate addresses for Bitcoin (compressed and uncompressed): https://en.bitcoin.it/wiki/Bitcoin_Address_Utility https://github.com/casascius/Bitcoin-Address-Utility It ...
0
votes
0answers
41 views

Bitcoin-qt doesn't get a server connection?

I have created a new altcoin, and I run a server on one machine and connect bitcoin-qt on another machine. In this case it's blink the network connection, sometimes it shows one connection and after ...
4
votes
2answers
110 views

How do you derive the lambda and beta values for endomorphism on the secp256k1 curve?

You can see a little background about this on this bitcointalk post by the late Hal Finney. Beta and lambda are the values on the secp256k1 curve where: λ^3 (mod N) = 1 β^3 (mod P) = 1 As seen ...
3
votes
3answers
260 views

Papers/Books on how bitcoin works from a mathematical perspective?

I'm a math student interested in Cryptography. Is there any paper or book which explains, in mathematics and cryptography terms, how bitcoin (more general, a digital cryptocurrency system) works? In ...
6
votes
1answer
218 views

Is there a fallback plan if bitcoin's underlying cryptography is cracked?

Lets say someone started making real viable quantum computers that were affordable enough that large companies could buy one. And lets say a quantum algorithm was devised to crack the private keys of ...
0
votes
2answers
60 views

Hash property resistance

I'm experimenting with some self study cryptography and I was curious about the two following scenarios (simple answers and/or in relation to bitcoin) If SHA256 was found to lack pre-image ...
1
vote
1answer
55 views

What is the algorithm used to sign data within Nxt?

I understand that Nxt uses Curve25519 to generate pubkeys for user accounts, however, I can't find a reference that states what which signing algorithm/process is used for transactions and blocks. ...
2
votes
2answers
277 views

What exactly is generator G in Bitcoin's elliptical curve algorithm?

What exactly is the generator G in elliptical curve math? It is typically described as a point on the curve. Is this a tuple of values? What properties does it have?
2
votes
1answer
104 views

Anonymous transactions technology for a cryptocoin? [duplicate]

I’m thinking of investing in a cryptocoin with anonymous transactions feature. So far there are 3 well-known technologies for that: coinjoin (Bitcoin), masternodes (Darkcoin) and CryptoNote ...
3
votes
3answers
114 views

Which cryptocurrencies deviate significantly from Bitcoin?

There's been dozens of alternate cryptocurrencies but I don't believe many of them did much other than find/replace some strings. We see Bitcoin as made up of the blockchain and proof-of-work via ...
-2
votes
1answer
94 views

Bitcoin related research areas [closed]

I have a one year research project in my MSc curriculum. So i was suppose to address a existing issue in bitcoin protocol. Highly appreciate if someone can advise me and give me some ideas. Thank ...
2
votes
2answers
107 views

Are Bitcoin Block Hashes Predictable

to create the block chain, the Bitcoin network runs hashing algorithms for each block, is it mathematically possible to predict the hash value of say, the 100th block from the last block currently in ...
1
vote
1answer
61 views

Should I use a large random value for i in BIP 32 instead of sequential?

BIP32 doesn't have any guidance on how to choose the i value for child keys. Is there any benefit to using a random value for i ? Other than documenting and saving the value of I for various ...
2
votes
1answer
163 views

What are the weakest cryptographic guarantees in Bitcoin?

I read in this Github pull that Bitcoin relies on weaker cryptographic guarantees than SHA256. What are the weaker cryptographic guarantees being referred to? Could it be that RipeMD is 160 bits? ...
6
votes
3answers
446 views

How can a bitcoin exchange prove its solvency while maintaining privacy?

What methods can an exchange website use to prove that it actually has all its users' bitcoins? These are the requirements: User privacy is a must. No one should be able to tell how many bitcoins ...
2
votes
1answer
290 views

Is Electrum Cryptographically Secure?

Electrum seems very user friendly, thin and convenient, but is it cryptographically secure? One of the ways to attack any cryptographic system is to exploit weaknesses in the key generation ...
1
vote
1answer
129 views

ECIES - When is it bad to sign and encrypt using the same keys?

Suppose I have a public key for a particular user (perhaps extracted when using the new public key recovery format included in P2SH, and BIP32 transactions). Is it OK the same key for both signing ...
2
votes
3answers
519 views

Why is Bitcoin better than other cryptocurrency? [duplicate]

If there too many types of such kind of currency, will them be very cheap? I have 4 BTC and since the current BTC price waves a lot, I am wondering this. Thanks,
3
votes
1answer
104 views

Is there a signature format, or cryptography has *only one* possible S value?

EDIT: This question is not specific to Bitcoin. It's applicable to any other crypto currency that is interested in using a different signature scheme than Bitcoin or the QT reference client. One ...
12
votes
1answer
2k views

What does the curve used in Bitcoin, secp256k1, look like?

I'm reading up on ECC curves and on many of them I see an illustration that looks like this What does the comparable curve in Bitcoin look like, or are all curves generally the same?
2
votes
0answers
57 views

Does Amit Sahai's indistinguishability obfuscator enable Autonomous Virtual Corporations or “Agents”?

Given that an "Agent" is described as Agents are autonomous programs that maintain their own wallet, which they use to buy server time. Money is obtained by the agent selling services. If demand ...
0
votes
2answers
883 views

How does this OpenCL BTC private-key cracker work? Is it a real threat to bitcoins?

I am specifically referring to this over at bitcointalk.org. The general consensus I gathered from reading the thread is that this is not a hoax. There seems to be a group of generated bitcoin ...
1
vote
2answers
82 views

Multibit: Using the same passphrase for both my wallet and exported private keys

I have a password-protected wallet in Multibit that I have backed up in multiple locations. I have exported the private keys from this wallet. The private keys are password-protected using the same ...
1
vote
1answer
129 views

Are transactions still tamper-proof if blocks are hashed without nonces?

If an alt were to forgo difficulty and timed release of new supply by removing the nonce from blocks therefore the whole difficulty/target system, is hashing without nonces still providing the same ...
1
vote
1answer
147 views

Why are blocks hashed?

Am I correct that addresses are hashed to compress a huge text-represented coprime into something of manageable size? Am I also correct that transactions are hashed for the same reason and also ...
1
vote
1answer
236 views

What is the Elliptic Curve algorithm used in Ripple to generate public / private key pairs?

The algorithm used by bitcoin to generate keys is secp256k1, is it the same for ripple?
0
votes
2answers
397 views

Is it possible to use a PGP key as a bitcoin address?

Both bitcoin and encrypted emailing are based on public key cryptography. However, they use different implementations, so I assume that a public PGP key cannot be used as a bitcoin address directly. ...
2
votes
3answers
840 views

What is the problem that mining solves?

Of course, the function of mining is to secure the blockchain, but I'm looking for a more abstract summary of what the exact problem is that mining tries to solve? I believe its called the Byzantine ...
3
votes
1answer
885 views

Step by Step - how does sending 1 bitcoin work?

I've been reading about how BitCoin works for a few weeks now - and I'm trying to understand under-the-hood how the cryptography works. So i'll explain what I know at the moment - and if someone ...
3
votes
1answer
337 views

What are the advantages of using Secp256k1?

Bitcoin uses secp256k1 as the specification for it's address system (https://en.bitcoin.it/wiki/Secp256k1). What are the advantages (and disadvantages) of using this over other specifications such as ...
3
votes
1answer
126 views

What is the ECC key length for OpenCoin's implementation of Ripple?

http://www.reddit.com/r/Bitcoin/comments/1lubl1/wired_oped_worries_that_elliptic_curve/cc2vhos suggests that key lengths < 500 bits are no longer considered secure from the NSA. What key length is ...
-1
votes
2answers
390 views

Litecoin formal description

Is there a paper with a formal description of a Litecoin? And a paper explaining what a miner does? I would like to understand how to mine "manually", I mean I dont need a tutorial on how to install ...
3
votes
1answer
278 views

The compressed public key byte header

I've noticed that compressed public keys are always either 0x02 or 0x03, but what exactly determines whether it's 0x02 or 0x03? I can go look at the OpenSSL code to answer this, but I'm hoping someone ...
0
votes
0answers
39 views

Future treasure hunters [duplicate]

Would it be possible and economical in the far future to look for addresses abandoned in the early years of Bitcoin and then brute force their private keys? In the near future the usual argument goes ...
5
votes
1answer
291 views

Recovering the last few digits of a Litecoin private key

Is it possible to recover the last few lost digits (10) of my Litecoin wallet private key? Are there any recovery tools available? Or will I have to try and roll my own? Crucially, what crypto ...
1
vote
2answers
1k views

Economics of Bitcoin Mining [duplicate]

I thought I understood the gist of what "bitcoins" are: electronic currency tokens representing $X USD that could be used to trade, buy or sell online items. But recently I heard the term "mining for ...
5
votes
1answer
371 views

Address Public Private key verification [duplicate]

Apologies if this question has been asked before, but when a bitcoin client wishes to send funds to an address, does the bitcoin protocol force the client to verify that the address has a ...
6
votes
1answer
224 views

What standard is used for the ECDSA to verify transactions?

Bitcoin used Elliptic Curve Digital Signature Algorithm. (see here). I'm wondering what standard is actually used for this Algorithm: which curve? which prime? Can anybody give me a reference? (Wiki ...