An encrypted hash that is generated to verify the validity of a transaction; it verifies that whoever created the transaction actually owns and is able to spend the relevant coins.

learn more… | top users | synonyms (1)

2
votes
2answers
47 views

For what purposes do we need “Sign message”?

I got a simple but straight question: Why do we need "Sign message". Also give explanations and examples.
0
votes
1answer
48 views

How do we verify the signature on a raw transaction using Bitcoinj?

I managed to create a raw tx using Bitcoinj but not able to figure out how to verify its signatures. Assuming I know the addresses corresponding to the (supposedly) unspent outputs used as inputs to ...
5
votes
1answer
85 views

What are the implications of Schnorr signatures?

Adam Back (adam3us) explained in March, 2014, but it is all math. There's another short post with advantages, though. This answer on crypto.SE claims that Bitcoin considered using Ed25519 which is ...
1
vote
1answer
35 views

Double Counting SigOps to Prevent CPU Exhaustion Attacks

In the bitcoin v0.9.3 source: https://github.com/bitcoin/bitcoin/blob/v0.9.3/src/main.cpp ConnectBlock() calls CheckBlock() as one of the first things it does. ...
0
votes
1answer
17 views

Is the a library for generating signatures and transactions for scrypt coins?

I'm looking for a library similar to this bitcoin one but that works with scrypt based coins.
1
vote
2answers
51 views

Why does txID generation consider signatures?

I've been reading a lot about transaction malleability, and noticed that the only way to achieve it is by altering the transaction signature/s. Why does the protocol even consider the signature in ...
2
votes
1answer
79 views

How to specify ECDSA nonce used in bitcoin signing code?

Below is the CECKey::Sign() code (v0.9.3). bool Sign(const uint256 &hash, std::vector<unsigned char>& vchSig) { vchSig.clear(); ECDSA_SIG *sig = ECDSA_do_sign((unsigned ...
1
vote
1answer
41 views

Why would sending a raw transaction from a different node fail?

When I make a transaction spending an output on one machine (sending it to another locally owned address), and then broadcast it on the same machine, it all works fine, as below. (NODE A) $ ...
0
votes
1answer
61 views

If I am spending multiple inputs from the same address, must I provide a signature for each input?

Suppose I have two inputs belonging to the same address. Do I need to provide a signature script for each input that proves that I own it? Wouldn't that waste space? Also, in the standard client, ...
2
votes
2answers
167 views

How does the ECDSA verification algorithm work during transaction

I understand the basic concept ECDSA where if Bob wants to sign a message it generates a random number n, multiply it with the secp256k1, r = the x value , s = (H(x)dr)*n^-1 mod q. Also the ...
1
vote
1answer
36 views

What is the algorithm used to sign data within Nxt?

I understand that Nxt uses Curve25519 to generate pubkeys for user accounts, however, I can't find a reference that states what which signing algorithm/process is used for transactions and blocks. ...
1
vote
1answer
54 views

How many Secp256k1 signatures exist for a piece of data?

ECDSA signatures are not deterministic. That is, random information is used in calculating the signature for a piece of data. Approximately how many unique signatures exist for a piece of data? ...
2
votes
1answer
192 views

How to sign bitcoin transaction with 'bitcoind' and non-bitcoind-wallet private key?

My Target I want to create and sign bitcoin transactio using 'bitcoind' and 'bitcoin-cli' only. But the private key is unrelated to 'bitcoind' built-in wallet. That is, private / public key pair was ...
1
vote
1answer
50 views

Is it possible to create a transaction with 2txin and 2txout?

Is it possible to create a transaction with 2txin and 2txout? If it is possible, then how does one sign this transaction? Or do I have to create two separate transactions? 1txin 1txout and 1txin ...
2
votes
1answer
58 views

Why does re-signing a message in bitcoin-qt produce a different hash

I just noticed that if you repeatedly sign the same message in bitcoin-qt, the signature changes. Why is this?
2
votes
3answers
856 views

ECDSA Signature and the “z” value

The following link contains details on how to reverse the ECDSA signature if given two identical "R" values. http://www.nilsschneider.net/2013/01/28/recovering-bitcoin-private-keys.html I have read ...
5
votes
2answers
147 views

What should I say when I “sign” a message, to prove that I own an address?

This reddit thread discusses a user who lost some coins and is trying to prove that he owns that address. There was a question in how he signed, and what he signed in the message fields, since it's ...
2
votes
2answers
112 views

Can Bitcoin scripting be used for double spending attacks?

A standard Bitcoin transaction deposits coins into an address and then, using Bitcoin's scripting language, states that whoever wants to spend this output must be in possess of the private key ...
1
vote
0answers
27 views

signing colored assets to identify worthwhile assets

With colored coin and similar solutions, anyone can create an asset. Using counterparty as an example, this gets out of control very quickly with no way to determine "good" assets easily ...
0
votes
0answers
117 views

What is a step by step way to insert data in OP_RETURN?

I was following https://bitcointalk.org/index.php?topic=453086.0 for creating a message in OP_RETURN. I am able to decode my raw transaction, but on signrawtransaction it gives error: ...
5
votes
1answer
92 views

Can you always derive a public Bitcoin address from a message and a random signature?

Let's say my Bitcoin address is 1Nu5mzpUD9A7daZ76QJEsBfkBjCWVLh7pJ and I sign the message random-challenge with its private key. The result is : ...
2
votes
1answer
170 views

Are public keys included in signatures?

I can't easily and quickly determine from these wiki pages, 1 and 2, if the public key is included in the signed message. Are public keys included in the signed message, or are they transmitted ...
1
vote
1answer
57 views

Bitcoind need blockchain to sign transaction

I'm trying to sign a transaction using bitcoind via rpc. Here is the request I send. signrawtransaction ...
2
votes
1answer
89 views

Verification of transaction once trasaction is broadcasted

I have few doubts regarding verification of transaction and am trying to find answers from last few days. I agree similar post exist in this portal but I am not getting satisfactory answer for my ...
0
votes
1answer
32 views

Can I sign and redeem many outputs at the same time? (shrink the size of a tx Input)

I'm looking at this transaction that is redeeming many historical outputs from the same address. When I look at the blockchain, it seems pretty clear there is redundancy here of the public key being ...
1
vote
0answers
45 views

Bitcoin Qt message signature construction

I'm trying to construct the message verification signature of bitcoin qt in python. I'm able to compute the couple (r,s) of the signature, but, even I'm not able to find the correct way to encode it ...
2
votes
2answers
88 views

Are Bitcoin signatures currency specific?

I am wondering whether signatures for Bitcoin-like currencies are currency specific, or given one program that can sign a Bitcoin raw/JSON transaction one can create valid signatures for other coins ...
0
votes
1answer
159 views

signrawtransaction - Which private key from BitAddress.org?

I am trying to do multisignature addresses and when it comes time to spend the funds, I am getting stuck. If I create a 2 of 3 multisignature address using 3 public keys that I generate locally, then ...
1
vote
2answers
1k views

SignRawTransaction - What is scriptPubKey and redeemScript? [SOLVED] [closed]

Let me talk about how I got to the situation I'm in right now. I am using PHP and the JSON library to control bitcoind. And doing so..... I created a multisignature address requiring 2 of 3 ...
7
votes
3answers
187 views

Tx Malleability: Why is the Script not included in the Signed Hash?

Sipa lists sources of tx malleability here: https://gist.github.com/sipa/8907691 It is clear to me how a change in the signature itself or the signature formating leads to a different tx hash (1. ...
3
votes
1answer
98 views

Is there a signature format, or cryptography has *only one* possible S value?

EDIT: This question is not specific to Bitcoin. It's applicable to any other crypto currency that is interested in using a different signature scheme than Bitcoin or the QT reference client. One ...
6
votes
1answer
332 views

What's the rationale of using ECDSA instead of RSA?

One major drawback of (EC)DSA is that it requires a good RNG, otherwise the private key may be accidentally exposed. This is also one of the major reasons (I found so far) why no(?) smartcard supports ...
5
votes
1answer
91 views

Isn't bribe smearing possible because no payee signature is required?

The Bitcoin protocol does not require the payee to sign for a payment; only the payer signs (the payer signs a hash of the payee and payer's public keys). In other words, a payee signature is not ...
2
votes
1answer
149 views

Multi-Signature Transaction - Verify First Signature is Valid?

Using Gavin Anderson's TwoOfThree.sh Gist located here: https://gist.github.com/gavinandresen/3966071 Is it possible to verify the first "partial" signrawtransaction is valid from the known public ...
4
votes
1answer
137 views

How to sign non-standard transaction

Consider Testnet transaction 7a438...de03e which has vout[0].scriptPubKey = OP_DUP OP_DROP OP_DUP OP_HASH160 039.....6fe OP_EQUALVERIFY OP_CHECKSIG The script is equivalent to a standard ...
2
votes
2answers
84 views

Can an attacker steal a very recent tx and alter it, broadcasting a new tx with his address on the output?

I'm reading the technical FAQs on the wiki, and what I don't see is, if I create a transaction with signed prev_outs and new outputs, do I also sign the ENTIRE new tx before broadcasting? I don't see ...
4
votes
3answers
98 views

How are “message signatures” verified without having access to the public key?

In the bitcoin-qt client you can sign and verify messages using only the public address. Since the public address is a RIPEMD160 hash how is it possible that I can verify a signature since I do not ...
4
votes
1answer
817 views

parsing bitcoin input and output addresses from scripts

can someone walk me through the process of combining script inputs and outputs to reveal the base58 encoded input and output addresses. take for example, block 728. this has two raw script inputs: ...
1
vote
0answers
61 views

Code sample to sign a transaction

I have the 32-bytes double hash of a transaction, a 32-bytes private key, and I would like to sign the hash using the private key. How do I do that using BouncyCastle (or anything, really), in C# or ...
3
votes
1answer
145 views

Exhaustive technical explanation of signing & verification

I apologize for such a noobish question and am ashamed that I'm not getting this yet, but I can't seem to put together all of the pieces. I've read every question I can find on the subject, the ...
4
votes
2answers
463 views

How do signatures work?

Just curious, if I send a transaction from one address to another, how do they verify it without knowing my private key?
4
votes
1answer
481 views

How to verify the signature of a raw transaction

I know there are many tools to check an ecdsa signature of a bitcoin transaction and I understand the ecdsa algorithm. It takes three inputs, a hash of the transaction, the digital signature and the ...
4
votes
2answers
552 views

How to sign a message using Bitcoin private key?

How does one create a proper signature for a given message using Bitcoin private keys? I have an input address of 5JeWZ1z6sRcLTJXdQEDdB986E6XfLAkj9CgNE4EHzr5GmjrVFpf or ...
4
votes
1answer
220 views

Why use DER encoding for signatures?

A signature in secp256k1 is two 32 byte numbers. DER encoding a signature adds about 6-7 bytes. It also needlessly complicates things (is DER encoding used anywhere else?). In a transaction format ...
3
votes
1answer
735 views

Step by Step - how does sending 1 bitcoin work?

I've been reading about how BitCoin works for a few weeks now - and I'm trying to understand under-the-hood how the cryptography works. So i'll explain what I know at the moment - and if someone ...
6
votes
2answers
1k views

Is there a user-friendly tool for creating and signing raw transactions?

The title stands for itself. The only tool for doing so I know of is the bitcoind daemon, but it is for from user-friendly. A web-tool in JS would be ideal or a simple CLI tool with clear ...
1
vote
1answer
125 views

Would a transition to a different signature scheme be feasible?

The recent problem with Android's SecureRandom PRNG once again shows that using (EC)DSA can go horribly wrong if the signature nonce is ever reused. There is an elliptic curve signature scheme that ...
6
votes
1answer
304 views

Where does the random number come in to play when signing a transaction?

Just given all the news about this topic lately (Android security flaw), I'm curious about WHERE and WHY the random number is used during the signing of a transaction. I always thought a transaction ...
4
votes
1answer
1k views

Why the signature is always 65 (1+32+32) bytes long?

A signature created by the Bitcoin-Qt client can always be decoded (base64) to a 65-byte array. This array seems (according to https://github.com/bitcoin/bitcoin/blob/master/src/key.cpp#L217) to ...
3
votes
2answers
1k views

How to sign a transaction hash in ruby?

I'm trying to sign (using secp256k1) a transaction as explained here. I'm using my own private key and an unsigned transaction as the input. I'm able to sign it using the JSON-RPC client, but when I ...