I read in this Github pull that Bitcoin relies on weaker cryptographic guarantees than SHA256.

What are the weaker cryptographic guarantees being referred to?

Could it be that RipeMD is 160 bits? ... or is it something else? Perhaps in the ECC curve itself?

  • I don't see the word "weak" in that thread at all. What's the quote you're interested in? – Rich Apodaca Jun 24 '18 at 19:18
  • Did you link the wrong pull request? – G. Maxwell Jul 23 '18 at 12:32

This doesn't directly answer your question, but in ECDSA, if the private key is close to one of the 768 rendezvous points on the secp256k1 curve, it is considered a weak private key and can be compromised. See this BitcoinTalk thread. In practice, this isn't a huge threat as long as you use a good source of randomness since the space around those rendezvous points is a miniscule fraction of the total keyspace.

| improve this answer | |
  • 1
    That thread is a joke, sorry. – Pieter Wuille Mar 10 '14 at 18:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.