Questions tagged [message-signing]

Functionality for proving a message was sent by the holder of a particular private key. The standard Bitcoin client provides this features since version 0.6.0

Filter by
Sorted by
Tagged with
0
votes
0answers
24 views

Transaction signing and security: Different signing approaches

I am currently studying for an exam and reviewing a past one from the CS 251: Bitcoin and Crypto Currencies course in Stanford with the following question on transaction signing. I have written my ...
2
votes
0answers
48 views

Why is adding s values in half aggregation insecure?

Jonas Nick an Tim Ruffing discussed in a presentation that summing up the s values in signature half aggregation would be insecure (without giving the reason) They presented a secure solution which ...
1
vote
1answer
78 views

Why is full blockwide signature aggregation of schnorr signatures non-interactive?

I can only think of the MuSig paper describing how Rouge attacks are prevented by also committing to the public key of all signers. But as far as I understand the case of multisig is not the same as ...
4
votes
1answer
168 views

Why does blockwide signature aggregation prevent adaptor signatures?

In a recent video about half signatures, Jonas Nick mentions that blockwide signature aggregation interferes with adaptor signatures and offering atomic swaps (I guess via PTLCs). I am confused about ...
0
votes
1answer
59 views

Can't Make Sense of Why OP_CHECKSIG Fails Here

I'm try to get to grips with verifying the signature of a P2PKH transaction. I have an example transaction: 9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1 I am trying to verify the ...
0
votes
1answer
24 views

Distinguishing bitcoin deposits

If i had a central Bitcoin wallet, and then allowed 3 different people to deposit bitcoin into that address, would there be anyway to distinguish who they are, without knowing who's address is who, i ...
3
votes
1answer
143 views

Electrum: display redeem script of a P2SH utxo

I use Electrum with a multisig wallet. I would like to figure out how to prove ownership of a "coin". I understand that I need to share the whole redeem script so that it's hash can be ...
1
vote
2answers
396 views

How does a hardware wallet interact with the bitcoin network?

I tried to understand the principle how the hardware wallet sends transactions to another Bitcoin address since it is not connected via full node to the blockchain. I found this answer: How do ...
4
votes
1answer
58 views

What is the “value” in a Segwit sig hash?

The BIP143 docs state that the value is: "value of the output spent by this input (8-byte little endian)" If I have a single UTXO of value 10,000 sats and I'm using this as an input for a ...
1
vote
0answers
48 views

How to use Digital Signature to Sign Unsigned Transaction?

so I was trying to sign my unsigned transaction: ...
0
votes
0answers
62 views

Using a bitcoin library to create digital signatures in TypeScript/Javascript

I have been trying to sign my transactions with a digital signature for the past few days but seems that libraries in bitcoin, as far as to my knowledge do not provide a simple way to sign the ...
1
vote
2answers
67 views

signmessage and verifymessage CLI commands not accepting Address from getnewaddress?

I am trying the following commands on my v0.19.0.1 Core implementation: CLI signmessage $(CLI getnewaddress) <message> and the identical CLI signmessagewithprivkey $(bitcoin-cli dumpprivkey $(...
0
votes
0answers
51 views

How do I compute a private key, if I have two messages signed using the same nonce? [duplicate]

If I sign two messages with the same private key and nonce, it compromises security, making it possible to calculate the private key. I'm implementing a system (outside of bitcoin) where a message, ...
0
votes
1answer
71 views

Relationship of R/S signature in between signed message and DER signature

this time is difficult for me to explain problem i was facing. i realize that R/S signature in DER signature is not match to the 1 in bitcoin signed message? Ok below is my say signed message. -----...
0
votes
1answer
69 views

Is there some way to take advantage of the fact that I own 10 BTC without spending them or giving up control of them?

Is there some kind of "Bitcoin society" where I can instruct my Bitcoin Core to run a command which then spits out some kind of cryptographic code which verifies that I control/own the number of BTC ...
0
votes
1answer
76 views

difference between signing a message and signing a p2sh

can i use the sign message function to sign the serialized hex for a p2sh transaction? Are the ecdsa functions used the same or are they different? It looks like the output is in a different format ...
0
votes
1answer
32 views

Difficulty in verifying bitcoin-core signing keys

How can I verify bitcoin0.19 signature bwith gpg? I read I should use gpg --recv-keys signingkey, but I don't understand where is the file signiggkey. I tried to download Bitcoin Core Release Signing ...
2
votes
1answer
147 views

how difficult is it to generating an ECDSA (or Schnorr) signature with a certain number of leading zeros?

If both the public key and the private key are known ahead of time (public knowledge), and the goal is to choose a message/nonce that generates a signature with, for example, a certain number of ...
0
votes
2answers
555 views

Difference between Sign Message and Sign Transaction

Using "Sign Message" one can prove ownership of an address. This happens by signing a human-readable string using the private key belonging to the address. The owner then provides the address, message ...
1
vote
1answer
94 views

Up to 4 Different Points within ECDSA/Public Key Recovery technique

In the answer to this question, it is stated that: Rearranging this equation you get rP = sR - mG, or P = (s/r)R - (m/r)G. Thus, it seems we can just compute the public key from the message and the ...
0
votes
1answer
415 views

Error code -3 when signing message from gui?

I tried to sign a message from gui v18 and the debug console without success: With the popup it shows red text: "the entered address does not refer to a key. Please check the address and try ...
2
votes
1answer
840 views

How to determine first byte (recovery ID) for signatures (message signing)?

I do realize that in bitcoin when we return the signature result for signing a message the first byte includes information for recovering the public key required for verification using a formula like ...
6
votes
1answer
1k views

How is Public Key extracted from (message, digital signature, address)

I'm under the impression that a public key is revealed when you sign a message. Given these 3 inputs. P2PKH Address, Digital Signature, Message. Is the public key exposed? If so, how do you extract ...
0
votes
1answer
72 views

Signature generation

I am trying to unwrap bitcoin transaction generation process. A bit confused about signing part. My understanding is the transaction is sha256'd, then sha256'd one more time, then ECDSA'd. Based ...
1
vote
1answer
1k views

How does a Doge public key is created from a private key? [closed]

I am looking for the differences between the creation of Doge public keys and Bitcoin public keys when inserting a private key. I am trying to make a small web-app that signs messages. There are a ...
2
votes
2answers
1k views

How are Bitcoin Signed Messages generated?

Ledger Nano S and other pieces of Bitcoin software and hardware can sign messages using the private key associated with an address. Doing this, I get the following output: -----BEGIN BITCOIN SIGNED ...
11
votes
1answer
3k views

What are the advantages of Schnorr vs ECDSA?

I understand that Schnorr signatures provide an improvement on ECDSA in that they are a fixed 64 bytes instead of the longer ECDSA sig format, however, I don't see how this is an advantage over ECDSA ...
2
votes
2answers
518 views

Is It Possible to Prove Ownership of Public Key Hash without Public Key?

I am building a system where I would like the user to specify a public key hash of a wallet that they have control over in the event of tips, refunds, and/or otherwise needing to send value back to ...
0
votes
0answers
77 views

How do I import a wallet into Bitcoin core? [duplicate]

I have the public address, and the private key of a BTC wallet. How can I import this into bitcoin core so that I can use it to sign messages? I need to be able to sign a message to show that I ...
0
votes
0answers
82 views

What is a simple way to sign a message to verify that you possess the private key for a specific public address?

I need to explain to somebody step by step how to go through the process of signing a message to verify they own the private keys associated with an address containing funds. This is to ensure ...
0
votes
2answers
727 views

How can I sign message for a blockchain watch only bitcoin address

I have to verify sign message for one of my blockchain bitcoin address. I couldn't find sign message or private key option in More Options beside all my bitcoin addresses. I thought maybe I have to ...
0
votes
3answers
620 views

What are the realistic system requirements to run bitcoin core for generating wallets, signing and verifying messages on a laptop?

I need to be able to verify messages and check that funds in wallets are valid and that the claimed owner possesses the private keys (hence checking messages signed). I know that I need to be able ...
4
votes
1answer
536 views

How can I verify someone controls the private key behind a segwit address?

With a legacy P2PKH address, signmessage and verifymessage can be used to verify that the other party actually controls the bitcoin address in question. However, P2SH, P2WPKH and P2WSH addresses throw ...
1
vote
1answer
479 views

How do I get my private key?

Background I saw this on the internet I didn't think signing / verifying was possible with P2SH addresses, so I guess this wallet must be using something like signmessagewithprivkey ¯\_(ツ)_/¯ ...
0
votes
2answers
367 views

Using BitcoinJS - How do you verify a message using a segwit bech32 (bc1…) / P2SH (3…) addresses?

I created a signature from a message using my private key. But how do I verify this signed message using my segwit addresses of 3... or bc1...? How do I verify this using the BitcoinJS library?
0
votes
2answers
214 views

What is the command to sign a message using a segwit private key using electrum 3?

I want to sign and verify a message using a segwit private key that i generated with another application. How can I sign and verify a message using electrum 3 cli?
1
vote
1answer
198 views

Explicit message length in Bitcoin Signed message

the message format is: length(prefix),prefix,length(message),message with prefix="Bitcoin Signed Message:\n" now I am wondering why the length(message) in the middle is needed as it should be able ...
1
vote
1answer
84 views

Why are miners allowed to change a tx id?

BIP 62 proposed to make transaction malleability impossible. Why was this retracted and why are miners allowed to change a transaction id? Also, what does it mean when someone says signatures ...
0
votes
1answer
31 views

What are some uses of a signed crytocurrency message in a product or service or some other useful use of this feature?

A signed message is a way to prove a user owns an address. But what are some useful products or services that have been built around this feature with signing a bitcoin / altcoin message with their ...
1
vote
1answer
617 views

message signing: is it safe to publish the address, message and hash

I want to use message signing in another application to prove a particular wallet owner did in fact make the transaction. This as I understand it is what message signing/verification is for. I just ...
0
votes
3answers
3k views

What is wrong with my ScriptSig? I get 64: scriptsig-not-pushonly

I currently try to create and sign transaction from scratch. I made it to construct and sign a transaction. If I verify it manually it looks good but using a "proper" wallet my transaction is refused: ...
1
vote
1answer
181 views

Why the signature of the same message changes in some wallets, but not all?

Using the "message signing" feature in the Bitcoin and Dash it's static with the same message. Signing the same message with the same private key will result always in the same signature. This ...
3
votes
1answer
724 views

How to tell which part of the previous tx I need to make the hash to sign for an old given tx?

I have recently been taught (here) how to create the hash to sign for a given "input script" for an existing transaction. I then sought to test my abilities and sought out a difficult ...
0
votes
1answer
1k views

How can I sign a message with a litecoin private key and also generate a litecoin address from a string?

I'm working with bitcoinjs, but is there a litecoinjs equivalent? I want to be able to sign and verify messages with my litecoin private key and also generate litecoin addresses from a string. How ...
7
votes
3answers
35k views

online tool to play around with ECDSA public keys, message signature verification?

I realize that this question may be borderline bannable because it's asking for suggestions on tools, but it will really help newbies. This online tool allowed me to play around with hashes and to ...
0
votes
1answer
53 views

How can one sign a message to prove ownership of a BIP47 reusable payment code?

Is there a way to sign a message and prove that an entity owns a BIP47 reusable payment code? How can this be done via js if available?
2
votes
0answers
41 views

Proving sendership of transactions

Why does Bitcoin Core, on the message verification tab, say that verifying messages signed by Bitcoin addresses "only proves the signing party receives with the address, it cannot prove sendership of ...
4
votes
1answer
1k views

how do you sign and verify a message that you own a bitcoin address using javascript?

Is there a bitcoin library or even just pure javascript way of signing and verifying you own a btc address?
9
votes
1answer
283 views

OP_CHECKSIG: reasoning behind construction of message to be signed

I've closely studied the deservedly famous OP_CHECKSIG explanation found here, including the diagram found here. That explanation details how to construct the message that is signed via ECDSA, ...
3
votes
1answer
415 views

I'm trying to create a new kind of escrow with bitcoin, not sure if it's possible

First off, I understand that the standard way to do escrow with bitcoin is a P2SH with a 2 of 3 multisig redeem script. I'd like to try and do escrow in the following way: names of 3 parties involved:...