The Elliptic Curve Digital Signature Algorithm

learn more… | top users | synonyms

0
votes
0answers
47 views

Generating ECDSA private key -Small issue with Python data conversion

So i'm looking to play with python bitcoin address generator (I found on github source: https://github.com/weex/addrgen/blob/master/addrgen.py) I'm not an expert at SSL/python and i'm having ...
0
votes
1answer
26 views

In ScriptSig, which form of the public key is considered canonical?

In the standard pay-to-pubKeyHash scriptSig, which form of the public key should be used. My understanding is that both the compressed (33 bytes) and the expanded (64 bytes) are both valid. Is there ...
6
votes
1answer
141 views

What's the rationale of using ECDSA instead of RSA?

One major drawback of (EC)DSA is that it requires a good RNG, otherwise the private key may be accidentally exposed. This is also one of the major reasons (I found so far) why no(?) smartcard supports ...
0
votes
1answer
219 views

Public key from private key generation problem

I met some problems, when I was trying to write function able to create Bitcoin public key from private key. I was using the tutorial: ...
1
vote
2answers
171 views

How to find out the ECDSA private key perfix version for Altcoins?

I want to create a paperwallet for an altcoin (Protoshares). I know the public key version byte is 0x38 (56) and the addresses start with P... But how do I find out the ECDSA private key prefix? For ...
1
vote
1answer
87 views

Why do keys need both X and Y coordinates, if X can be solved for Y using the curve equation?

Reference: https://en.bitcoin.it/wiki/File:PubKeyToAddr.png and https://en.bitcoin.it/wiki/Secp256k1 Why do we need both X and Y to make a private key?
3
votes
1answer
100 views

Why use DER encoding for signatures?

A signature in secp256k1 is two 32 byte numbers. DER encoding a signature adds about 6-7 bytes. It also needlessly complicates things (is DER encoding used anywhere else?). In a transaction format ...
1
vote
2answers
344 views

How are brain wallets generated?

How do sites like blockchain.info and bitaddress.org generate private keys by simply hashing a string? (the passphrase?) In this wiki article, ...
2
votes
1answer
312 views

What are the advantages of using Secp256k1?

Bitcoin uses secp256k1 as the specification for it's address system (https://en.bitcoin.it/wiki/Secp256k1). What are the advantages (and disadvantages) of using this over other specifications such as ...
1
vote
1answer
113 views

Would a transition to a different signature scheme be feasible?

The recent problem with Android's SecureRandom PRNG once again shows that using (EC)DSA can go horribly wrong if the signature nonce is ever reused. There is an elliptic curve signature scheme that ...
3
votes
1answer
355 views

Why the signature is always 65 (1+32+32) bytes long?

A signature created by the Bitcoin-Qt client can always be decoded (base64) to a 65-byte array. This array seems (according to https://github.com/bitcoin/bitcoin/blob/master/src/key.cpp#L217) to ...
8
votes
2answers
832 views

How vulnerable is bitcoin to quantum algorithms? [duplicate]

Assuming that quantum computers are implemented some time in the near-ish future, how vulnerable is Bitcoin to decryption via quantum algorithms? For example, Shor's algorithm enables a quantum ...
5
votes
2answers
1k views

If SHA256 and/or RIPEMD-160 were broken, would all bitcoin addresses be compromised?

If not, what else would be needed to steal all funds from all people and completely break bitcoin? I bet some will say ECSDA gives bitcoin an additional layer of protection. I counter this by saying ...
1
vote
0answers
42 views

Is the generator G of the keypair always the same number for all different tx messages in Bitcoin?

If so, what is that number and why can't you divide the public key by G to obtain the private key?
4
votes
2answers
212 views

How much time it takes to verify a Bitcoin signature in the Satoshi client?

Assuming: An average modern computer Using a single thread, as the current Satoshi client does Using the OpenSSL library, as the Satoshi Bitcoin client does The signature is not in the signature ...
4
votes
1answer
311 views

ECDSA transaction signing on a smartcard?

I know that the underlying digitial signing method Bitcoin uses for transactions is ECDSA (sep256k1 if memory serves). I've also read a few papers about performing ECDSA signing on certain kinds of ...
3
votes
2answers
2k views

For a non-technical person, how do I generate a ECDSA key pair easily?

I want to know because I would like to generate a vanity address at Vanity Pool.
4
votes
2answers
367 views

Storage of Private Keys

Most web apps that accept bitcoin (whether it's an exchange, a gambling site, etc) provide the user with a public address for depositing bitcoins into their account. How are these web applications ...
5
votes
3answers
674 views

Which programming languages support secp256k1?

Which programming languages have some ready libraries that support Bitcoin's ECDSA curve - secp256k1?
4
votes
1answer
286 views

What can a person do with special private keys?

The Alert message in the Standard Client will only be displayed if it is signed with a correct ECDSA private key. Should anyone get that private key, they would be able to propagate any alert through ...
3
votes
1answer
476 views

Transaction signature generation

When one sets up a transaction, the input of the transaction needs to have a script with a signature to show that you can spend those coins. Which fields of the previous and current transactions need ...
2
votes
1answer
133 views

What is the “wallet export format”?

The "wallet export format" is mentioned at the Wiki page for Mini private key format, but it doesn't seem to be explained on the Wiki. How does one convert the export format to and from corresponding ...
3
votes
1answer
775 views

ECDSA r, s encoding as a signature

An ECDSA algorithm when signing a given messages produces a pair of outputs, r and s. How, given a sigStr from a Tx can one extract r and s? Are they just concatenated byte arrays of a specific ...