Questions tagged [message-signing]
Functionality for proving a message was sent by the holder of a particular private key. The standard Bitcoin client provides this features since version 0.6.0
95
questions
0
votes
0
answers
34
views
Why are the results of BTC message signature implemented in Python different from those on electrum?
from bit import Key
from bit.format import verify_sig
import base64
from hashlib import sha256
# Use WIF format private key
wif_private_key = 'Kxb19KFrrqrmT79bvG4tnKibVcgppavcvjkP1iBGGjnH787H39QG'
...
- 1
2
votes
2
answers
86
views
After signing a message, how to verify the signature with JavaScript/TypeScript?
At the frontend, user signs an arbitrary message (e.g., "Sign this message to prove that you own this wallet"). We can do this via, for example, UniSat's signMessage function (see here).
I ...
- 173
0
votes
0
answers
30
views
Bitcoin message signing and other functions coded in C (not C++). Is there a good library that takes care of it all?
After searching for libraries that could do this, and/or code that could do this, all around the internet, and also AI code assistants failing me, I have managed to write C code (not C++, simple C) ...
3
votes
1
answer
157
views
Is there still a digital signature loophole in Bitcoin transactions?
I want to ask a question: Does the problem of repeating the value r still persist today in Bitcoin transactions? If so, how can I find transactions that contain this thing? I have research on how to ...
- 31
0
votes
1
answer
78
views
Signmessage with Raspiblitz
For an absolute beginner, how do I sign the new adress formats (taproot e.g.)? In Ride the Lightning (RTL) there is the possiblity to sign messages for lightning.
But I need to sign from a specific ...
- 11
0
votes
0
answers
35
views
How to hash a message (tx message) to get message hash? [duplicate]
I am trying to create a raw TX and sign it. I know that to sign a transaction we need the message hash (here m) value which is double sha256 hash of something like this:
01000000 #Version
01 #Number ...
- 131
0
votes
2
answers
1k
views
How to verify that a signature was signed by a pubkey? Taproot and BIP0322
Using wallets like XVerse, users can sign a message using their ordinal btc address, let's say bc1XXX, the message is hashed based on BIP0322.
So I have:
User wallet: bc1XXX
Message hash: YYY
...
- 126
1
vote
0
answers
83
views
Message signing with airgapped wallet that doesn't support it
I need to implement message signing for various HWs, many of them support it on a firmware level, but some airgapped wallets like SeedSigner or Jade still don't. I was wondering if there's a way to ...
- 21
2
votes
1
answer
1k
views
With Legacy bitcoin addresses deprecated, will Bitcoin Core no longer be able to sign messages from an address?
Bitcoin Core can only sign messages from legacy bitcoin addresses, in my experience. With legacy addresses being deprecated in the software, does this mean that Bitcoin Core will no longer be able to ...
- 137
2
votes
0
answers
309
views
How does OP_CHECKSIG work for Taproot script path spending?
I've been studying all the ways Taproot transactions can be spent and I can get all of them to work except for when script path spending is used and the script is executed. Transaction 0c045625... is ...
- 792
1
vote
1
answer
195
views
SIGHASH_SINGLE with no corresponding output
Transaction 99fc1e5c753459808bac56435b3d45f2fcf0dd73016ea14460d63e9ddf353714 is an interesting example.
This transaction has 5 inputs and 1 output. All of the input scripts include 1 public key and 1 ...
- 792
1
vote
3
answers
100
views
Why can't I modify someone else's transactions, if I have their signature data?
As I know, signature system is adding signature to end of transaction. And doesn’t hash transaction, so others can know my signature.
If I can send a message directly to the node, can I use other’s ...
- 11
2
votes
2
answers
125
views
why do we need to hash before we use a private key to digitally sign a transaction? isn't just using a private key enough?
why is a hash needed for digital signatures? isn't it redundant since the point of hashing is to ensure contents are not tampered with , which the digital signature can do as well (on top of ensuring ...
- 77
0
votes
1
answer
353
views
Signing a message vs NFT to prove ownership
What is the difference between signing a message using a Bitcoin address to prove ownership and NFT verification which will be used by Twitter?
user103136
1
vote
2
answers
124
views
Error broadcasting SegWit transaction
I have this testnet transaction that I created:
Version: 01000000
Marker: 00
Flag: 01
Input Count: 01
Input #1 TXID: 42a752fe4ebd0bdc69cb1b3724de6ccc364661028ab9c043526f3f7cb0571147
Input #1 ...
- 125
0
votes
0
answers
295
views
Transaction signing and security: Different signing approaches
I am currently studying for an exam and reviewing a past one from the CS 251: Bitcoin and Crypto Currencies course in Stanford with the following question on transaction signing. I have written my ...
2
votes
0
answers
73
views
Why is adding s values in half aggregation insecure?
Jonas Nick an Tim Ruffing discussed in a presentation that summing up the s values in signature half aggregation would be insecure (without giving the reason)
They presented a secure solution which ...
- 11.9k
4
votes
1
answer
255
views
Why is full blockwide signature aggregation of schnorr signatures non-interactive?
I can only think of the MuSig paper describing how Rouge attacks are prevented by also committing to the public key of all signers. But as far as I understand the case of multisig is not the same as ...
- 11.9k
4
votes
2
answers
320
views
Why does blockwide signature aggregation prevent adaptor signatures?
In a recent video about half signatures, Jonas Nick mentions that blockwide signature aggregation interferes with adaptor signatures and offering atomic swaps (I guess via PTLCs).
I am confused about ...
- 11.9k
0
votes
1
answer
270
views
Can't Make Sense of Why OP_CHECKSIG Fails Here
I'm try to get to grips with verifying the signature of a P2PKH transaction.
I have an example transaction:
9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1
I am trying to verify the ...
- 329
0
votes
1
answer
39
views
Distinguishing bitcoin deposits
If i had a central Bitcoin wallet, and then allowed 3 different people to deposit bitcoin into that address, would there be anyway to distinguish who they are, without knowing who's address is who, i ...
3
votes
1
answer
516
views
Electrum: display redeem script of a P2SH utxo
I use Electrum with a multisig wallet. I would like to figure out how to prove ownership of a "coin".
I understand that I need to share the whole redeem script so that it's hash can be ...
- 141
1
vote
2
answers
704
views
How does a hardware wallet interact with the bitcoin network?
I tried to understand the principle how the hardware wallet sends transactions to another Bitcoin address since it is not connected via full node to the blockchain.
I found this answer: How do ...
- 205
4
votes
1
answer
197
views
What is the "value" in a Segwit sig hash?
The BIP143 docs state that the value is: "value of the output spent by this input (8-byte little endian)"
If I have a single UTXO of value 10,000 sats and I'm using this as an input for a ...
- 166
1
vote
0
answers
127
views
How to use Digital Signature to Sign Unsigned Transaction?
so I was trying to sign my unsigned transaction:
...
- 113
0
votes
2
answers
331
views
signmessage and verifymessage CLI commands not accepting Address from getnewaddress?
I am trying the following commands on my v0.19.0.1 Core implementation:
CLI signmessage $(CLI getnewaddress) <message>
and the identical
CLI signmessagewithprivkey $(bitcoin-cli dumpprivkey $(...
- 662
0
votes
0
answers
100
views
How do I compute a private key, if I have two messages signed using the same nonce? [duplicate]
If I sign two messages with the same private key and nonce, it compromises security, making it possible to calculate the private key.
I'm implementing a system (outside of bitcoin) where a message, ...
- 143
0
votes
1
answer
307
views
Relationship of R/S signature in between signed message and DER signature
this time is difficult for me to explain problem i was facing. i realize that R/S signature in DER signature is not match to the 1 in bitcoin signed message? Ok below is my say signed message.
-----...
- 55
0
votes
1
answer
93
views
Is there some way to take advantage of the fact that I own 10 BTC without spending them or giving up control of them?
Is there some kind of "Bitcoin society" where I can instruct my Bitcoin Core to run a command which then spits out some kind of cryptographic code which verifies that I control/own the number of BTC ...
0
votes
1
answer
176
views
difference between signing a message and signing a p2sh
can i use the sign message function to sign the serialized hex for a p2sh transaction? Are the ecdsa functions used the same or are they different? It looks like the output is in a different format ...
- 145
0
votes
1
answer
52
views
Difficulty in verifying bitcoin-core signing keys
How can I verify bitcoin0.19 signature bwith gpg?
I read I should use gpg --recv-keys signingkey, but I don't understand where is the file signiggkey. I tried to download Bitcoin Core Release Signing ...
- 404
2
votes
1
answer
241
views
how difficult is it to generating an ECDSA (or Schnorr) signature with a certain number of leading zeros?
If both the public key and the private key are known ahead of time (public knowledge), and the goal is to choose a message/nonce that generates a signature with, for example, a certain number of ...
- 424
3
votes
2
answers
2k
views
Difference between Sign Message and Sign Transaction
Using "Sign Message" one can prove ownership of an address.
This happens by signing a human-readable string using the private key belonging to the address.
The owner then provides the address, message ...
- 31
1
vote
1
answer
173
views
Up to 4 Different Points within ECDSA/Public Key Recovery technique
In the answer to this question, it is stated that:
Rearranging this equation you get rP = sR - mG, or P = (s/r)R - (m/r)G. Thus, it seems we can just compute the public key from the message and the ...
- 35
0
votes
1
answer
813
views
Error code -3 when signing message from gui?
I tried to sign a message from gui v18 and the debug console without success:
With the popup it shows red text:
"the entered address does not refer to a key. Please check the address
and try ...
- 255
6
votes
3
answers
2k
views
How to determine first byte (recovery ID) for signatures (message signing)?
I do realize that in bitcoin when we return the signature result for signing a message the first byte includes information for recovering the public key required for verification using a formula like ...
- 1,438
7
votes
1
answer
2k
views
How is Public Key extracted from (message, digital signature, address)
I'm under the impression that a public key is revealed when you sign a message.
Given these 3 inputs.
P2PKH Address, Digital Signature, Message.
Is the public key exposed?
If so, how do you extract ...
- 472
0
votes
1
answer
89
views
Signature generation
I am trying to unwrap bitcoin transaction generation process.
A bit confused about signing part.
My understanding is the transaction is sha256'd, then sha256'd one more time, then ECDSA'd.
Based ...
- 103
1
vote
1
answer
2k
views
How does a Doge public key is created from a private key? [closed]
I am looking for the differences between the creation of Doge public keys and Bitcoin public keys when inserting a private key.
I am trying to make a small web-app that signs messages. There are a ...
- 11
3
votes
2
answers
2k
views
How are Bitcoin Signed Messages generated?
Ledger Nano S and other pieces of Bitcoin software and hardware can sign messages using the private key associated with an address.
Doing this, I get the following output:
-----BEGIN BITCOIN SIGNED ...
- 1,057
15
votes
1
answer
6k
views
What are the advantages of Schnorr vs ECDSA?
I understand that Schnorr signatures provide an improvement on ECDSA in that they are a fixed 64 bytes instead of the longer ECDSA sig format, however, I don't see how this is an advantage over ECDSA ...
- 253
2
votes
2
answers
718
views
Is It Possible to Prove Ownership of Public Key Hash without Public Key?
I am building a system where I would like the user to specify a public key hash of a wallet that they have control over in the event of tips, refunds, and/or otherwise needing to send value back to ...
- 123
0
votes
0
answers
99
views
How do I import a wallet into Bitcoin core? [duplicate]
I have the public address, and the private key of a BTC wallet. How can I import this into bitcoin core so that I can use it to sign messages?
I need to be able to sign a message to show that I ...
- 145
0
votes
0
answers
100
views
What is a simple way to sign a message to verify that you possess the private key for a specific public address?
I need to explain to somebody step by step how to go through the process of signing a message to verify they own the private keys associated with an address containing funds. This is to ensure ...
- 145
0
votes
2
answers
950
views
How can I sign message for a blockchain watch only bitcoin address
I have to verify sign message for one of my blockchain bitcoin address. I couldn't find sign message or private key option in More Options beside all my bitcoin addresses. I thought maybe I have to ...
- 1
0
votes
3
answers
747
views
What are the realistic system requirements to run bitcoin core for generating wallets, signing and verifying messages on a laptop?
I need to be able to verify messages and check that funds in wallets are valid and that the claimed owner possesses the private keys (hence checking messages signed).
I know that I need to be able ...
- 145
4
votes
1
answer
710
views
How can I verify someone controls the private key behind a segwit address?
With a legacy P2PKH address, signmessage and verifymessage can be used to verify that the other party actually controls the bitcoin address in question. However, P2SH, P2WPKH and P2WSH addresses throw ...
- 774
1
vote
1
answer
1k
views
How do I get my private key?
Background
I saw this on the internet
I didn't think signing / verifying was possible with P2SH addresses, so I guess this wallet must be using something like signmessagewithprivkey
¯\_(ツ)_/¯
...
- 774
1
vote
2
answers
581
views
Using BitcoinJS - How do you verify a message using a segwit bech32 (bc1…) / P2SH (3…) addresses?
I created a signature from a message using my private key. But how do I verify this signed message using my segwit addresses of 3... or bc1...? How do I verify this using the BitcoinJS library?
- 11.1k
0
votes
2
answers
307
views
What is the command to sign a message using a segwit private key using electrum 3?
I want to sign and verify a message using a segwit private key that i generated with another application. How can I sign and verify a message using electrum 3 cli?
- 11.1k