The Elliptic Curve Digital Signature Algorithm
0
votes
3answers
14 views
Sign a tx with “low s” value using OpenSSL
I currently try to sign a tx using OpenSSL. After some tinkering I think I got most of the tx right but Electrum complains with mandatory-script-verify-flag-failed (Non-canonical signature: S value is ...
-1
votes
2answers
51 views
how do you figure out the r and s out of a signature using python [closed]
ECDSA r, s encoding as a signature
this link doesnt seem to add up, any suggestions?
1
vote
1answer
31 views
Possibility of contructing a valid transaction without knowning private key
From here you get that in step 2 of ECDSA sign process, you use
z, the Ln leftmost bits of e = HASH(message/transaction) in both the process of generating and verifing the signature.
I understand ...
1
vote
1answer
34 views
How were the secp256k1 base point coordinates decided?
79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798,483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8 seems very random to me. I see how this point is on the curve, but how ...
1
vote
1answer
34 views
If newer versions of bitcoin and or bitcoin cash don't allow 0x04 uncompressed public keys, what do you do if you have an address based on one?
So if you have an address with coins in it that uses an uncompressed public key (preceeded by a "04") then how can coins from that wallet be utilized with a network that doesn't allow such public keys?...
2
votes
1answer
84 views
Are Schnorr signatures quantum-computer resistant?
Here (https://bitcoincore.org/en/2017/03/23/schnorr-signature-aggregation/) it says Schnorr replaces ECDSA, we know that ECDSA can be broken by quantum computers. Can Schnorr be broken by q-computers ...
1
vote
0answers
148 views
Is the following a valid bitcoin private key? - FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFE
In secp256k1 (Bitcoin's elliptic curve) it is defined that valid private keys may range from 1 to FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFE BAAEDCE6 AF48A03B BFD25E8C D0364141 - 1. (https://crypto....
1
vote
2answers
704 views
online tool to play around with ECDSA public keys, message signature verification?
I realize that this question may be borderline bannable because it's asking for suggestions on tools, but it will really help newbies. This online tool allowed me to play around with hashes and to ...
1
vote
1answer
51 views
Is there a simple reference implementation of ECDSA algorithms?
I'm using Node.js's elliptic library to do some signing on my app, but there is some chance I'll migrate it to another language. That library is kinda big and not easy to port, so, I wonder, is there ...
3
votes
1answer
501 views
How to sign raw transaction given a private key and SHA hash (in java)
I have followed the instructions here to build my own bitcoin transaction.
Redeeming a raw transaction step by step example required
Currently my code can create a transaction and compute the SHA ...
1
vote
1answer
80 views
Why transaction is signed with locking script from the input transaction?
Finally, I've successfully made a raw transaction with Python and this is the last thing, which is totally mistic for me.
In my case, here's the input transaction and it's locking script is:
OP_DUP ...
2
votes
1answer
261 views
OpenSSL and Secp256k1 differing in implementation of ECDSA signatures?
OpenSSL (from ssl in Mac OS X Version 10.11.6) and Secp256k1 (from the bitcoin-core repository) seem to differ in their implementations of ECDSA. I'm having issues with these differences and want to ...
2
votes
1answer
884 views
How to generate Bitcoin private - public keys with ECDSA module?
Pretty same question was asked here, but maybe there is a way to generate keys using ecdsa module in just a few lines of code?
0
votes
1answer
44 views
Should signature verification by key recovery ignore compression status?
The bitcoinj library's API offers a signMessage method of the ECKey class which returns a signature (r,s) as 65 bytes encoded as a Base64 string. The crunch of the encoding lies in the additional ...
0
votes
0answers
95 views
Two bits info for public key recovery from ECDSA signature
Background:
If q denotes the order of secp256k1 with associated prime field Fq, a signature is an ordered pair (r,s) of non-zero elements of Fq. Given some message m with projection e = proj(m) on Fq,...
