4

If only my private key were stolen, could it be used?

Without knowledge of the corresponding public key or address, can one spend BTC with only the private key?

I know you can derive the public key from a private key, but if an address has never been spent from and change is never returned to the same public key, the public key will remain unknown, thus how could one exploit knowledge of a private key alone?

EDIT: yes, i now realize this is a pretty bad question. i now know that with just a private key, an attacker can calculate the public key and Bitcoin address and thus spend any stored coins.

2
  • Welcome to Bitcoin.SE! To get the right eyes on what you're asking, please phrase the title as a question. Commented Mar 2, 2013 at 18:04
  • I'm unsure how to improve the title of this question, since it is so much confused. I was able to give an answer, though.
    – o0'.
    Commented Mar 2, 2013 at 18:57

1 Answer 1

4

Yes.

  • The private key is used to send from an address.
  • The public key is used to send to an address.
  • The public key is generated from the private key.

So if you have the private key you have full control over an address.

3
  • You would also need to know the transaction hash + index of the funding transaction (used as an INPUT in the payment transaction) but technically I don't need to know the Bitcoin address to do that.) Commented Mar 2, 2013 at 22:44
  • @StephenGornick: what is an "index"?
    – joe
    Commented Mar 16, 2013 at 15:53
  • @joe: To form a Bitcoin transaction (other than the coinbase tranasction to claim the mining reward) you need to know not just which transaction's output your trying to claim but also which output it is, since a transaction can have more than one output. Each output of a transaction has an index that must match in any transaction that tries to use that output as its input (or one of its inputs). (This is all public information though.) Commented Mar 17, 2013 at 0:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.