Questions tagged [ecdsa]

The Elliptic Curve Digital Signature Algorithm

Filter by
Sorted by
Tagged with
0
votes
1answer
15 views

Error while installing libwally

I am trying to install libwally on my debian machine. I followed the installation guide but running ./configure I got the warning === configuring in src/secp256k1 (/home/standup/libwally-core/src/...
0
votes
1answer
39 views

How to get public key and bitcoin compressed address from the coordinates (x,y) generated by ECDSA?

I have my x (0xca668a8b5f71e8724aada4b5343c28702a481787855cc42228b8fff97fe94d6a) and y (0x19dd3a603a55b3d8c5f62cbe177b9b63693fb8c91d76845bafc843a7aa19ea55) coordinates generated by ecdsa with a ...
-3
votes
4answers
164 views

How to forge a signature with fixed Z value

I want to forge a signature with a fixed z value, what is the formula to do that
1
vote
0answers
42 views

Curious about the Math that makes Bitcoin/Blockchain work ! Any good resources to learn it?

A bit of a background about me ; Computer Engineer but during my studies i didn't dive too deep into the maths , especially the maths that makes the blockchain and cryptography work looking for advice ...
-3
votes
2answers
302 views

How to derive the Private key when the two the nonces are k and k*2

Is the same private key using k and k*2 respectively in two different signatures vulnerable? If yes How to calculate the key in this case
0
votes
0answers
49 views

What is the best site/tool/way for finding the RSZ values of a bitcoin transaction? [duplicate]

The two most popular sites for doing this are down which are https://2coin.org/ and https://2xoin.com/getRSZfromRawTX/ with no indication they'll ever return to be usable. Can anyone here link any ...
0
votes
1answer
90 views

public key to private key using HASH TABLE (Pollard's kangaroo for SECPK1)

I have done a little bit of research on HASH TABLE (Pollard's kangaroo for SECPK1) I was wondering if there is any way to extract the private key range using the public key or the public address..??
0
votes
1answer
43 views

Why is signature S value is unnecessarily high not safe?

I get frequent warning when sending RawTX to PushTX message (Non-canonical signature: S value is unnecessarily high) Why is signature S with a large value dangerous (that is, when the first HEX ...
0
votes
1answer
40 views

What is the relativity between ECDSA public keys, if any?

Wondering if there is any relative connection between public keys? I know that they are a function of G, but is there any other connection they share? Is it possible to calculate how many G are ...
1
vote
1answer
139 views

Why MakeNewKey in key.cpp isn't called when getnewaddress or generate

Hi I'm student studying bitcoin-core. I tested bitcoin regtest mode, and I want to know when CKey::MakeNewKey() is called. when I do this, bitcoin-cli -regtest createwallet "wallet1" ...
0
votes
2answers
209 views

As a developer, what steps do I need to take to generate private-public keys?

When developing (I'm using Apple Swift), what steps are needed in order to independently create my own pair of private-public keys (with the ability to restore a private key from a mnemonic phrase)? ...
5
votes
1answer
164 views

Are there risks to using the same private key for both ECDSA and Schnorr signatures?

I think I've seen a comment by Greg Maxwell about this but am having trouble finding it. I think there was some risk when signing the same message with the same key with both algorithms? In this ...
0
votes
0answers
35 views

Nothing-Up-My-Sleeve BTC Addresses [duplicate]

I've been researching some crypto related concepts and came across "Nothing-Up-My-Sleeve Numbers" and from what I understand I can generated a Bitcoin address that basically comes with an ...
1
vote
1answer
101 views

Y coordinate of PubKey on elliptic curve prefix

Public keys in the form of 04[x,y] can be compressed since the x axis is symmetrical. Hence we only need the x-coordinate with the 02/03 prefix which states if Y is odd or even. I don't understand the ...
0
votes
1answer
49 views

Is ECDSA signing supported from within a Taproot tree or must all signing be Schnorr?

Let's say a server is set up to do ECDSA signing and you want to include the requirement to provide a ECDSA signature within your Taproot tree (script path). Is this supported?
1
vote
1answer
49 views

Are high-s ECDSA signatures forbidden in segwit witnesses?

I must have looked that up five times by now, but did segwit actually forbid high-s ECDSA signatures in witnesses, esp. in standard single-sig constructions such as P2SH-P2WPKH or P2WPKH? Or are high-...
4
votes
1answer
153 views

What previously existing technologies made Bitcoin possible?

When watching a tutorial, they mentioned that Bitcoin is based off 4 or 5 technologies that existed for at least a decade before Bitcoin. Satoshi Nakamoto was the first person to combine them all into ...
0
votes
1answer
600 views

How convert Bitcoin Privat Key Compression to public address?

This script gets the public address from the uncompressed private key. import ecdsa import hashlib import base58 private_key = input("privatekey: ") # ...
0
votes
3answers
480 views

What is the math behind Bitcoin's elliptic curve?

I have seen many videos regarding the math behind the bitcoin elliptical curve but none of them show the public key generation. They are just defining few steps. I need the complete math behind the ...
2
votes
1answer
152 views

secp256k1 lib compiling issue "invalid use of incomplete type secp256k1_context"

I make a small test code (test.cpp), try to show the problem I meet: to compile use g++ -o test test.cpp -lsecp256k1 #include <stdio.h> #include "secp256k1.h" static ...
1
vote
2answers
307 views

secp256k1 recovery id and how does the code work

Here I have some questions regarding the recovery id (recid) defined in secp256k1 implementation. I had found few posts about how the recid is defined and what does it mean, also the source code (...
0
votes
2answers
107 views

How is the random number R for transaction signatures created?

I wonder about the random number used in signatures that result in R values ? x coordinate R = G(k) How is it created? Does it have a specific chars length? Is there a specific random generator used, ...
0
votes
1answer
83 views

Random Number In R Value , what is it actually, is it the same as Nonce in the blocks

I wonder about the random number in R value ... if i am right , the R value is First part of the script signature which is combined of two parts (r,s) r = Gk (elliptic curve scalar multiplication) Or ...
1
vote
4answers
206 views

Is it possible to know if the result of 2 point subtraction is before or after G

I am trying to see if there is a way to see if subtraction of 2 points on the elliptical curve resulted in a point before or after G?. Let me explain what I mean by it. Let's take a point GP. Using ...
1
vote
4answers
698 views

What is the relationship between a Bitcoin Private Key / Public Key / Address?

What is the relationship between a Bitcoin Private Key / Public Key / Address? I see that a private key / public key pair is generated, but is there a possibility of generating a private key already ...
0
votes
0answers
35 views

How Can i Extract a Z value of a specific Bitcoin Transaction that Belongs to a merkel tree/root transaction?

am trying to find a z value of a transaction that is signed in a merkle tree/root block , i coudn't find a raw tx id in hex of that specific transaction that signed with specific address while a raw ...
1
vote
1answer
68 views

Is my ECDSA signature always unique?

In P2PKH the validation script is: <sig> <pubKey> OP_DUP OP_HASH160 <pubKeyHash> OP_EQUALVERIFY OP_CHECKSIG If I always use exactly the same private key and always sign exactly the ...
2
votes
2answers
116 views

Does every transaction have the same signature?

I want to know whether the bitcoin network generates the same signature for each transaction, because people have only one signature?
-1
votes
1answer
215 views

How to get the raw signature data of a transaction?

With the use of segwit, signature data is no longer part of transaction body and thus can’t be retrieved from block explorers. So is there a Bitcoin rpc method in order to get it directly without ...
0
votes
0answers
55 views

Is that proved that breaking ECDSA as hard as solving ECDLP?

Is that proved that breaking ECDSA (Elliptic Curve Digital Signature Algorithm) as hard as solving ECDLP(Elliptic Curve Discrete Logarithm Problem)?
0
votes
1answer
646 views

ECDSA public key to private key hex

I have an ecdsa public key how to get the private key of this public key; 0222d2deda24c03b2cc2b458c35780c62b6b5603c088709f17607b7ecf1399e4d7 how to solve this on python I am using Pydroid 3 on my ...
1
vote
1answer
91 views

Bitcoin's cryptographic protocol allows for leakage of information about one's Private Key, making recalculation of the private key possible?

Is it true that the cryptography which is used in bitcoin allows for leakage of information which could be used to recalculate the private key - IF you are continuously reusing the same public address ...
-2
votes
1answer
308 views

What does this variable R mean

What does this variable R mean if it is the same in transaction signatures, and can I find S Z from the transaction I want an explanation or someone helps me to find the variables type address: ...
-1
votes
1answer
1k views

i find r s z from tow transaction but the r value is not same

i need your help plase i find r s z from tow transaction but the r value is not same from this wallet 1XCPdWb6kk7PGfvbdRbRuNh51aPc4vqC7 this is information tx 1 ...
0
votes
0answers
78 views

how i can find private key from Y X Z [duplicate]

How can I find the private key with X and Y and Z in the transaction i have this ('THE R VALUE is :', '0cf435db180216f3aaa5c2cb8231cbccf2f6824fc0051396b45e4ab01bb0f5e3') ('THE S VALUE is :', '...
1
vote
1answer
118 views

PUBLIC ECDSA KEY

I want to know how I can build a Python script that can Calculate Public Key ECDSA from a Private Key (HEX) and the result is similar to the imagen
0
votes
0answers
135 views

The Generator Point (G) in Eliptic curve Cryptography

I am aware that the generator point (G) in Ecdsa is constant... But if I we're to calculate an equation using this number, I don't know if I should use the compressed or the uncompressed format of the ...
2
votes
2answers
447 views

Openssl magic values? Secp256k1 and ECDSA similarities? What makes secp256k1 special?

Part 1: Running this command seems to be a reliable way to produce a pubkey from a valid private key that for Bitcoin. Is this a correct assumption? openssl ec -inform DER -text -noout -in <(cat &...
0
votes
1answer
522 views

Calculate Z from r and s

Can anyone explain me any clearly answer or code in python with examples how we can calculate Z value from r and s and inputs outputs order ?? I search in google and youtube and i not saw any ...
1
vote
1answer
100 views

Does secp256k1 library provide API for generating uncompressed key?

Hi I am right now want to do a make a small tool to generate some test vector for ecdsa. Openssl is quite good, for support secp256k1 bitcoin provides an excellent library. However, it looks what I ...
1
vote
1answer
153 views

Basic point multiplication with G in libsecp256k1

I'm trying to work out a minimal example with the bitcoin core secp256k1 library but am a bit lost due to the many options available. Concretely, I simply want to use libsecp256k1 to multiply the ...
6
votes
0answers
362 views

How many bitcoin transactions can be verified per second on commodity hardware in 2020?

I am trying to figure out how many Bitcoin transactions could be verified per second. Am I correct that signature verification is more expensive than computing Merkletrees and hashes and therefore ...
1
vote
1answer
1k views

What does sigscript and witness mean?

I tried using the R scanner from the following link https://github.com/ca333/rng-scanner/blob/master/rscan.py, then I got results like this Bitcoin Address : 3EZ5yV5FARDqEZTXzwWNt33XLVhv7hqAS2 R: ...
3
votes
1answer
196 views

Elliptic Curve Point at Infinity

Let's take into account the Bitcoin curve. My questions are: What exactly is the "point at infinity"? Is there more than one "point at infinity" How can I identify if my EC generated x and y are the "...
13
votes
1answer
3k views

What are the potential attacks against ECDSA that would be possible if we used raw public keys as addresses?

According to this answer about why addresses are hashes rather than public keys there are potential attacks that are possible if you have the public key rather than the address, what are these attacks?...
2
votes
2answers
3k views

How to find Reused R values

I use software from https://github.com/ca333/rng-scanner , I try to find r that is reused. from the software I found results Bitcoin Address : 1GQdrgqAbkeEPUef1UpiTc4X1mUHMcyuGW In Input NR : 141 ~ ...
0
votes
1answer
148 views

Bitcoin Transaction Signing

I wrote a couple of algorithms that perform the ECDSA and also the verification. So I used my algorithm and the RPC call for signing and I got a couple of questions. Since we have the ephemeral ...
1
vote
2answers
3k views

How do I to get the r, S and Z values from a raw transaction (version 2)

For example I have this raw transaction ...
3
votes
3answers
1k views

How to subtract two points on an elliptic curve?

Please tell me if there is a formula for A-B, (That is, subtraction of two points / minus). I know how two points are added, A + B this addition is described in detail (Please tell me how you can ...
1
vote
1answer
425 views

How to verify a signed message by bitcoin core?

I want to verify, in Java, a signature produced with bitcoin core's signmessagewithprivkey (equivalent to the verifymessage). I noticed a bitcoinj method similar to the bitcoin core's verifymessage - ...