Questions tagged [cryptography]
Concerning the broad subject of cryptography and its narrow application in Bitcoin protocol and applications.
287
questions
-1
votes
0
answers
26
views
Which Crypto exchange you use most to buy Bitcoin? [closed]
Which Crypto exchange you use most to buy Bitcoin? With or without KYC.
0
votes
1
answer
67
views
Public key factors - but what's next?
Let's say I found (I know, impossible) public key factors. What to do with them next to compute original private key for that public key?
- 141
0
votes
1
answer
47
views
Unconfirmed bitcoins deposit from online casion. they paid a fee of 1.82 on a 4k withdrawal.. what do I do? [duplicate]
I made a bitcoin withdrawal from a online casino of $4000. They sent me the payment but it won't confirm. I see they payed a fee of $1.82 so I'm sure thats why it hasnt confirmed yet but Its been a ...
2
votes
1
answer
97
views
Probability of Generating a Bitcoin Address with Specific Starting and Ending Characters
I've recently come across a situation where scammers are generating (bitcoin) addresses that have the same starting and ending characters. This is concerning as many people, including myself, often ...
8
votes
1
answer
125
views
Why doesn't Bitcoin Core use auxiliary randomness when performing Schnorr signatures?
BIP340 recommends using auxiliary randomness in generation of the Schnorr signature nonce, as follows:
Using unpredictable randomness additionally increases protection against other side-channel ...
- 81
10
votes
3
answers
3k
views
How can I manually (on paper) calculate a Bitcoin public key from a private key?
I am interested in generating a Bitcoin address by hand for security's sake. After I choose/generate a private key, how do I generate the public key?
From there, how would I double check my work?
...
- 205
0
votes
0
answers
69
views
Derive Secp256k1 curve public key starting off from known 32 bytes string
Starting off from a sha256 hash of a threshold pubkey, how can I generate a valid secp256k1 public key?
The challenge is that the 32 bytes of the hash does not always fall within secp256k1 range, so I ...
- 1
-2
votes
1
answer
79
views
What is the step-by-step algorithmic process to find the modular multiplicative inverse of (n-1) mod np, where (n-1) and np are not coprime?
Having perused the stackexchange, I found some similar questions, but am having difficulty understanding how to arrive at the solution to (n-1)*x=1 mod np, where:
n: Finite group order of the Bitcoin ...
0
votes
0
answers
48
views
Bulletproofs vs Merkle paths for inclusion proofs
In this blog post, Andrew Poelstra comments that bulletproofs can be used for efficient merkle inclusion proofs.
How would these proofs compare in size and verifying time to simple merkle paths? Take ...
- 449
1
vote
2
answers
140
views
What does it mean for an integer to be a member of secp256k1 group?
I'm reading the spending section of BIP47:
Alice calculates a scalar shared secret using the x value of S:
s = SHA256(Sx).
If the value of s is not in the secp256k1 group, Alice MUST increment the ...
- 13
9
votes
1
answer
180
views
How does this field multiplication in libsecp256k1 work?
I'm looking at libsecp256k1's codebase, for learning reasons (doubt I can contribute with anything useful there). While looking at the field implementation, the implementation of ...
- 951
2
votes
1
answer
142
views
weak transaction in secp256k1
My question is related to weak signature vulnerability testing where a hypothetical attacker does not know the values of the nonce or private key itself, but can determine that the nonce 'k1' is ...
- 23
0
votes
1
answer
52
views
Why does the Bitcoin network encrypt the transaction data? [duplicate]
The whole process of encryption sounds useless to me. Miners/validators and full nodes need to verify each transaction. They need two pieces of information:
The original transaction data
The ...
2
votes
1
answer
72
views
Where is chacha20 and chacha_poly_aead used in Bitcoin Core?
In the source code of Bitcoin Core there are these functions but no explanation of how and where they are used. I need to make a description for all crypto-functions used in Bitcoin Core (https://...
0
votes
1
answer
89
views
How to encrypt messages with Pub/Priv keys
I'm wondering if it's possible to use the Bitcoin public and private keys (usually used for signing) for text encryption. This is an example in nodeJs:
import pkg from 'bitcore-lib'
const { ...
- 113
4
votes
1
answer
160
views
How does the BIP340 lift_x algorithm work?
Couple questions of code that I'm reviewing trying to learn schnorr sigs.
Why do we want an odd private key? I see even tests on the private key and then subtract it from the SECP256K1 Order to get an ...
- 331
2
votes
1
answer
347
views
Why bitcoin's generator point does not satisfy Elliptic Curve Cryptography equation?
This is my Python program:
Acurve = 0
Bcurve = 7
Gx = 0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798
Gy = 0x483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8
print(...
0
votes
0
answers
84
views
Is www.soloxbit.com a legitimate exchange? [duplicate]
help is needed urgently.
I have been invited to use a crypto exchange called www.soloxbit.com by a telegram group. I signed up as there was a 50% bonus on my first deposit using their referral.
My ...
2
votes
1
answer
214
views
Why g is 2 and 3 to derive the lambda and beta values for endomorphism on the secp256k1 curve?
As you can seen here, in hex, N and P are:
N = FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFE BAAEDCE6 AF48A03B BFD25E8C D0364141
P = FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFE FFFFFC2F
The ...
- 21
0
votes
1
answer
265
views
What's the difference between the anti klepto protocol and anti exfil?
What is the difference between the anti-klepto protocol (also here) and Anti-Exfil? Is it the same thing just with different names or are there differences? It seems they are both addressing the nonce ...
- 14.7k
0
votes
0
answers
75
views
problem accessing wallet
I have a 2011 wallet.dat created in version 0.4.0 it accepts my password normally. but when putting in the current version of bitcoin core it doesn't work can you help me?
If I enter any other (not ...
2
votes
2
answers
459
views
Why can't I reverse secp256k1's public key point in order to determine the private key?
I understand that the public key q is generated by the point addition of g (some secp256 k1 constant) u times such that u is a big number (private key). This process can be simplified in this diagram ...
- 157
-2
votes
1
answer
44
views
What is the best way to check multiple crypto coins payments are paid - NODE JS
I am trying to write a gateway system where users can check the data upon the callback that is sent to their specific url.
I am wondering how I could go about checking that the payment has been ...
- 1
0
votes
1
answer
154
views
How do we know that Bitcoin supply is actually capped at 21 million?
Everyone says that the Bitcoin supply is capped at 21 million. But how did everybody come to this number? In Nakamoto's paper, I could not find this number. Can someone explain where it is or how we ...
- 3
2
votes
1
answer
223
views
How to calculate the public key, compute point P and create signature using ECDSA?
I'm quite new to the intricacies of bitcoin cryptography and ECDSA and elliptic curve cryptography has me quite stymied. I am faced with a curve with the equation: y^2 = x^3 + 7 of order N=39 with ...
- 21
10
votes
2
answers
2k
views
How is the generator point G chosen in the secp256k1 curve used in Bitcoin?
The generator point G in the secp256k1 curve used in Bitcoin is a known constant:
Gx = 0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798
Gy = ...
- 1,031
0
votes
1
answer
39
views
Is it Possible to Create Signature Chains for Private Keys to Sign Transactions with? Similar to how Certificate Authorities Use Intermediate Certs?
I am wondering if it is possible to implement this flow with bitcoin private keys, similar to how certificate authorities have a root cert and an intermediate cert used to sign csr's. It would be ...
- 13
0
votes
1
answer
90
views
Is it possible to compute just a byte of the public key by having the private key?
Let's say we have a certain known public key to which we want to find the private key with a bad approach such as brute forcing.
Would it be possible that instead of computing the whole public key to ...
- 3
1
vote
0
answers
107
views
What needs to be changed in Bitcoin if SHA-256 is broken? [duplicate]
I come up with a little bit "catastrophical“ question. I declare that I understand the degree of improbability of such a scenario in our lifetime, but I would still be interested in your opinion. ...
- 11
0
votes
1
answer
377
views
What happens to the public and private keys after a transaction? Specifically, how (and why) do they change upon payment?
Feel free to answer/address as many of these topics as you like:
In particular, I am interested in how bitcoins can be stolen, e.g., the 2016 Bitfinex hack. If I am not mistaken, the only way to steal ...
- 3
1
vote
1
answer
123
views
How transactions script work?
I am trying to learn Bitcoin in some technical details, but I don't really understand the process of locking and unlocking scripts. I know that for what they are using, but can someone explain me some ...
- 11
0
votes
1
answer
119
views
How do nodes fetch unconfirmed transactions?
I'm taking up a project to build a software in python to mine cryptocurrency (preferably bitcoin).
I have an overview of the computation that needs to be done.
I would like to know how nodes fetch ...
1
vote
1
answer
142
views
BIP 32 CKDpriv not working in my python implementation
I have been working on implementing BIP 32 in Python. This is my code for deriving normal (not hardened) child keys as part of an HD_Key class:
def CKDpriv(self, index):
key = bytes.fromhex(self.c)...
- 47
-1
votes
1
answer
55
views
how does new exchanges order books work?
When a new exchange is launched and it doesn't have many users, how does it managed an order book? how can they match orders when there's not enough of them?
0
votes
1
answer
85
views
BT wifi Internet router not detecting S9K miner
I am mining crypto via GPU & ASIC miners. I recently bought an S9K Antminer which powers on perfectly fine; however as we all know, it needs to connect to the internet via an ethernet cable. This ...
0
votes
1
answer
393
views
How to get public key and bitcoin compressed address from the coordinates (x,y) generated by ECDSA?
I have my x (0xca668a8b5f71e8724aada4b5343c28702a481787855cc42228b8fff97fe94d6a) and y (0x19dd3a603a55b3d8c5f62cbe177b9b63693fb8c91d76845bafc843a7aa19ea55) coordinates generated by ecdsa with a ...
- 1
0
votes
1
answer
83
views
If you lose your Bitcoin wallet Password, can you simply transfer private key to another bitcoin wallet provider?
If you lose your Bitcoin wallet password, can you simply transfer private key to another bitcoin wallet provider? I mean if I lost the password to the website where the wallet is stored, can I simply ...
- 113
0
votes
3
answers
174
views
bitcoin private key usage
My next question is how Private Key needed to spend coins. According to my understanding for transaction needed below steps:
A wants to send 10 coin to B
A make transaction example: from: A, to :B ...
- 101
0
votes
1
answer
43
views
how target walled address is secure to save received amount?
What about if I (as a hacker) change the amount from 5 to 1 for any transaction and put signature with my (as a hacker) Private Key and mine that block again. Yes, I lose 1 coin, At the same time isn'...
- 101
0
votes
3
answers
84
views
Long-term present in a form of cryptocurrency for newborn
Lets go...
I am relatively new to to world of crypto. Have some experience with Binance, last few weeks. My friend had a son, and I want to give him a little different present - crypto investment in a ...
- 1
0
votes
2
answers
256
views
Can we have multiple possible nonce making same number of leading zeroes in the hash?
Is it possible to have different nonce which are satisfying the same condition of having let's say 4 leading zeroes in the hash?
Is it possible that one node suggests 89123 nonce and other node ...
3
votes
1
answer
168
views
Why does the chacha20 implemented in the Bitcoin Core use a 64 bit nonce?
The draft of chacha20 uses a 64-bit nonce, but the final version of chacha20 specification uses a 96-bit nonce.
The #9792 PR adds chacha20 to Bitcoin Core. We can see the function ChaCha20::SetIV(...
- 33
3
votes
1
answer
700
views
Why does the TXID have 256 bits when Bitcoin's address security is 160-bit?
Commonly used Bitcoin addresses have the security of 2160 (due to the RIPEMD-160 hash). This means that Bitcoin is based on the fact that 160-bit security is good enough. If someone breaks 160-bit ...
- 41
1
vote
1
answer
110
views
How does a Wallet Create a Transaction when a Public Address Is Provided?
Given a public Bitcoin wallet address 1BdYVvwoxTWMGqJS2Pg6NkVD7RnENVjSac; is pasted into a wallet to send Bitcoins to. How does the wallet create an output to send coins to the public key associated ...
- 13
3
votes
2
answers
145
views
Traced stolen crypto to exchange. Any way to get it back?
A week my BTC was stolen (very likely some form of trojan/keylogger as I stupidly kept the keys on a computer which connects to the internet). After getting over the initial shock, I looked into the ...
- 31
8
votes
1
answer
2k
views
Should I share my seed phrase to earn airdrop tokens?
Someone on Face Book said I could earn free crypto by appying for an airdrop. He told me to download Blockchain from app store to my phone. I did this and created my account with a password. I also ...
1
vote
1
answer
252
views
Some technical questions about Bitcoin [closed]
I'm a developer. I've read a lot about Bitcoin structure and how it works. But yet something confuse me.
I would like to share them with you and read your answers:
When a miner solves a block, how ...
- 11
0
votes
1
answer
175
views
Canceling my pending withdrawal BTC
How can i cancel my pending withdrawal BTC of $1,240. Its been pending for 2 days. it has no confirmations and on the blockchain it says it receives 0 and sent 0. Someone PLEASE help me!
1
vote
1
answer
232
views
Explanation of "Timestamp Server" section in original bitcoin paper
I'm trying to understand the "Timestamp Server" section in the original bitcoin paper. It feels overly short for someone without an understanding of cryptography.
Is it saying?
A block ...
- 113
0
votes
0
answers
43
views
Get/Calculate Address
I'm currently using a program that analyses the block files. It splits all the stuff into multiple .csv files. Is there any method I can do to get the addresses & amount sent/received from tx_in ...
