An encrypted hash that is generated to verify the validity of a transaction; it verifies that whoever created the transaction actually owns and is able to spend the relevant coins.

learn more… | top users | synonyms (1)

1
vote
1answer
529 views

OP_CHECKSIG signature hash type 0

On bitcoin wiki OP_CHECKSIG documentation : Firstly always this (the default) procedure is applied: 1. the public key and the signature are popped from the stack, in that order. If the hash-type ...
1
vote
1answer
52 views

Can you include a signature in a bitcoin payment?

I know you can use the bitcoin client to sign messages (for which you own the private key) and verify messages from other public addresses. But can you actually embed a signed message into a ...
1
vote
1answer
66 views

Bitcoin how to get X value from Y

How to get X value from Y? ECDSA x,y coordinate validity verification doesn't seem to work X = 0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 Python code, p = ...
0
votes
1answer
46 views

Bitcoin Testnet Trouble with bitcoin-ruby

I am having trouble with the bitcoin-ruby gem. I get the following error when trying to send money to another address I have on the test network: ...
0
votes
1answer
54 views

Why the message is need in verify function

here is the how bitcoin works under the hood article http://www.imponderablethings.com/2013/07/how-bitcoin-works-under-hood.html i did not got this why message is needed when using this verify ...
1
vote
2answers
36 views

The complement of s (when s < curve order / 2)

Bitcoinlib refers to the requirement that if s > ORDER / 2, then the complement of s should be used instead since it's one byte shorter This sounds like it's referring to the inverse or negative s ...
0
votes
1answer
39 views

Does RevokeSSL Require Self-Signed Certs to Work?

// , I don't want to go to https://bankofamerica.com and see it self-certified. I don't want to go to https://amazon.com and see it self-certified. I don't mind going to ...
0
votes
2answers
93 views

Download of Multibit Windows 64 Bit has corrupt signature

I'm trying to download Multibit from https://multibit.org/community.html the Win 64 version. it consistently gives a 'The signature of multibit-0.5.18-windows-setup.exe is corrupt of invalid.' is ...
0
votes
0answers
48 views

Any bitcoin transaction to get S1 and Z1 and R value script need

bitcoin transaction to get S1 and Z1 and R value script need Need script that gives bitcoin translation to S1 and Z1 and R value like below link ...
-1
votes
1answer
77 views

converting RUBY script into PYTHON ( Recovering private key when someone uses the same k twice )

require 'ecdsa' public_key_hex = '02a50eb66887d03fe186b608f477d99bc7631c56e64bb3af7dc97e71b917c5b364' msghash1_hex = '01b125d18422cdfa7b153f5bcf5b01927cf59791d1d9810009c70cd37b14f4e6' msghash2_hex = ...
1
vote
0answers
69 views

Same identical R value of all transaction not provide corresponding privatekey

ECDSA Signature and the ā€œzā€ value from above link learn calculation of z value and to get private key https://blockchain.info/tx/9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1 ...
0
votes
1answer
80 views

Two identical R value finding z value from two transaction

tx1 from the trans1 i got Input Scripts 30450220262e481b6d8905b5adba67aff05eb8261501b0a9434c0b7f043d00cf8d23c91b022100bf82c0d212f30d3a0599e9b879516d762eaf5688ab83787cf470e99af5a6917101 ...
0
votes
1answer
85 views

same R value is used for two different addresses? finding z1 and z2 value and privatekey

txid1 txid2 input script 1 304502206bcc247f1259262b4035bfa84f0397a69f69baa01659daaf94fe1164b650c86a022100a044b38e8264a1c928ddd28b4657aa7109d1ea30e911208c7ce57abcb1451fe601 ...
4
votes
1answer
68 views

bitcoin two identical R

Blockchain transaction id 30440220d47ce4c025c35ec440bc81d99834a624875161a26bf56ef7fdc0f5d52f843ad1022044e1ff2dfd8102cf7a47c21d5c9fd5701610d04953c6836596b4fe9dd2f53e3e01 ...
1
vote
2answers
93 views

blockchain checksig fail

i'm attempting to verify a checksig from a transaction in the live blockchain. it is failing on my debian jessie pc with openssl 1.0.1k, failing on my ubuntu 12.04 virtual machine with openssl 1.0.1 ...
1
vote
2answers
70 views

How to check if raw transaction is signed?

I have a raw transaction and would like to check if signed or not. How can I do this. I tried using bitcoind and verifying a transaction from be blockchain but it says its not complete. $ ...
1
vote
1answer
57 views

Signature: encoding a message - transaction to a point of curve y^2=x^3+7 and Bitcoin Core

Where should I look at in Bitcoin Core source code to figure out how the signature process trasform a message in a curve point? To sign a transaction (message) in Bitcoin system, you need to encode ...
1
vote
2answers
67 views

How are SIGHASH flags encoded into a signature?

This page describes SIGHASH flags: OP_CHECKSIG extracts a non-stack argument from each signature it evaluates, allowing the signer to decide which parts of the transaction to sign. Since the ...
2
votes
1answer
98 views

Do new SIGHASH types need a hard fork or a soft fork?

There have been a few new sighash types proposed. SIGHASH_NORMALIZED : Use a 'normalized' TXID in the inputs when serializing for signing. This normalized transaction id is calculated by removing ...
1
vote
2answers
92 views

How to create the <sig> <PubK> part in “scriptSig”?

I've decoderawtransaction and see in the vin part a "scriptSig" ,which I believe to be the "unlocking script" . Assuming I have the private key in a paper wallet and someone send me transaction to ...
1
vote
0answers
52 views

How do I get hash to verify transaction?

If I have the public key and signature for a transaction how do I get the hash value that is used in verify(hash, sig, pubkey). I want to know how to work backwards from a raw transaction to get it, ...
0
votes
1answer
62 views

How to extract the signature of a transaction using bitcoinj

I am trying to extract the signatures from a transaction. What is the best way to do this given a com.google.bitcoin.core.Transaction object I just received from the network?
2
votes
2answers
129 views

How can someone verify the signature of a Bitcoin ECDSA signature without knowing the signer's public key?

I understand how ECDSA exactly works and for verification of a signature, the public key of the signer is required. But in Bitcoin, public key is double hashed and the only information the receiver ...
4
votes
1answer
220 views

Problems with deterministic ECDSA based on RFC6979 in Bitcoin

Generating random number k in elliptic curve is crucial and in any transactions signature in Bitcoin, random number k is required to compute a point k*G. If this k is chosen not randomly, it instantly ...
1
vote
2answers
238 views

Multisig vs Multi input transaction signing

Let's say we have a 2 of 2 multisig address that we want to spend from, so the transaction should be signed by both of the private keys. Now let's say we have a transaction with two inputs, so once ...
0
votes
1answer
154 views

How to find Z value of multisig transaction?

for example this transaction: http://2coin.org/txinfo.aspx?txid=6c3dc603da32bba3f56f2b33053aaf0f0f17322386c0c6846786bffe49f6ef22&cur=BTC Script not of right size to be a scriptSig, expecting 2 ...
2
votes
2answers
83 views

For what purposes do we need “Sign message”?

I got a simple but straight question: Why do we need "Sign message". Also give explanations and examples.
1
vote
1answer
161 views

How do we verify the signature on a raw transaction using Bitcoinj?

I managed to create a raw tx using Bitcoinj but not able to figure out how to verify its signatures. Assuming I know the addresses corresponding to the (supposedly) unspent outputs used as inputs to ...
10
votes
3answers
503 views

What are the implications of Schnorr signatures?

Adam Back (adam3us) explained in March, 2014, but it is all math. There's another short post with advantages, though. This answer on crypto.SE claims that Bitcoin considered using Ed25519 which is ...
1
vote
1answer
52 views

Double Counting SigOps to Prevent CPU Exhaustion Attacks

In the bitcoin v0.9.3 source: https://github.com/bitcoin/bitcoin/blob/v0.9.3/src/main.cpp ConnectBlock() calls CheckBlock() as one of the first things it does. ...
0
votes
1answer
22 views

Is the a library for generating signatures and transactions for scrypt coins?

I'm looking for a library similar to this bitcoin one but that works with scrypt based coins.
1
vote
2answers
66 views

Why does txID generation consider signatures?

I've been reading a lot about transaction malleability, and noticed that the only way to achieve it is by altering the transaction signature/s. Why does the protocol even consider the signature in ...
2
votes
1answer
125 views

How to specify ECDSA nonce used in bitcoin signing code?

Below is the CECKey::Sign() code (v0.9.3). bool Sign(const uint256 &hash, std::vector<unsigned char>& vchSig) { vchSig.clear(); ECDSA_SIG *sig = ECDSA_do_sign((unsigned ...
1
vote
1answer
80 views

Why would sending a raw transaction from a different node fail?

When I make a transaction spending an output on one machine (sending it to another locally owned address), and then broadcast it on the same machine, it all works fine, as below. (NODE A) $ ...
0
votes
1answer
123 views

If I am spending multiple inputs from the same address, must I provide a signature for each input?

Suppose I have two inputs belonging to the same address. Do I need to provide a signature script for each input that proves that I own it? Wouldn't that waste space? Also, in the standard client, ...
4
votes
2answers
427 views

How does the ECDSA verification algorithm work during transaction?

I understand the basic concept ECDSA where if Bob wants to sign a message it generates a random number n, multiply it with the secp256k1, r = the x value , s = (H(x)dr)*n^-1 mod q. Also the ...
1
vote
1answer
55 views

What is the algorithm used to sign data within Nxt?

I understand that Nxt uses Curve25519 to generate pubkeys for user accounts, however, I can't find a reference that states what which signing algorithm/process is used for transactions and blocks. ...
1
vote
1answer
72 views

How many Secp256k1 signatures exist for a piece of data?

ECDSA signatures are not deterministic. That is, random information is used in calculating the signature for a piece of data. Approximately how many unique signatures exist for a piece of data? ...
2
votes
1answer
704 views

How to sign bitcoin transaction with 'bitcoind' and non-bitcoind-wallet private key?

My Target I want to create and sign bitcoin transactio using 'bitcoind' and 'bitcoin-cli' only. But the private key is unrelated to 'bitcoind' built-in wallet. That is, private / public key pair was ...
1
vote
1answer
55 views

Is it possible to create a transaction with 2txin and 2txout?

Is it possible to create a transaction with 2txin and 2txout? If it is possible, then how does one sign this transaction? Or do I have to create two separate transactions? 1txin 1txout and 1txin ...
2
votes
1answer
72 views

Why does re-signing a message in bitcoin-qt produce a different hash

I just noticed that if you repeatedly sign the same message in bitcoin-qt, the signature changes. Why is this?
3
votes
3answers
2k views

ECDSA Signature and the “z” value

The following link contains details on how to reverse the ECDSA signature if given two identical "R" values. http://www.nilsschneider.net/2013/01/28/recovering-bitcoin-private-keys.html I have read ...
5
votes
2answers
160 views

What should I say when I “sign” a message, to prove that I own an address?

This reddit thread discusses a user who lost some coins and is trying to prove that he owns that address. There was a question in how he signed, and what he signed in the message fields, since it's ...
2
votes
2answers
190 views

Can Bitcoin scripting be used for double spending attacks?

A standard Bitcoin transaction deposits coins into an address and then, using Bitcoin's scripting language, states that whoever wants to spend this output must be in possess of the private key ...
1
vote
0answers
51 views

signing colored assets to identify worthwhile assets

With colored coin and similar solutions, anyone can create an asset. Using counterparty as an example, this gets out of control very quickly with no way to determine "good" assets easily ...
3
votes
2answers
494 views

What is a step by step way to insert data in OP_RETURN?

I was following https://bitcointalk.org/index.php?topic=453086.0 for creating a message in OP_RETURN. I am able to decode my raw transaction, but on signrawtransaction it gives error: ...
5
votes
1answer
110 views

Can you always derive a public Bitcoin address from a message and a random signature?

Let's say my Bitcoin address is 1Nu5mzpUD9A7daZ76QJEsBfkBjCWVLh7pJ and I sign the message random-challenge with its private key. The result is : ...
2
votes
1answer
183 views

Are public keys included in signatures?

I can't easily and quickly determine from these wiki pages, 1 and 2, if the public key is included in the signed message. Are public keys included in the signed message, or are they transmitted ...
1
vote
1answer
65 views

Bitcoind need blockchain to sign transaction

I'm trying to sign a transaction using bitcoind via rpc. Here is the request I send. signrawtransaction ...
2
votes
1answer
103 views

Verification of transaction once trasaction is broadcasted

I have few doubts regarding verification of transaction and am trying to find answers from last few days. I agree similar post exist in this portal but I am not getting satisfactory answer for my ...