Skip to main content

Questions tagged [message-signing]

Functionality for proving a message was sent by the holder of a particular private key. The standard Bitcoin client provides this features since version 0.6.0

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

Bitcoin message signing and other functions coded in C (not C++). Is there a good library that takes care of it all?

After searching for libraries that could do this, and/or code that could do this, all around the internet, and also AI code assistants failing me, I have managed to write C code (not C++, simple C) ...
3 votes
1 answer
146 views

Is there still a digital signature loophole in Bitcoin transactions?

I want to ask a question: Does the problem of repeating the value r still persist today in Bitcoin transactions? If so, how can I find transactions that contain this thing? I have research on how to ...
0 votes
1 answer
909 views

How to verify that a signature was signed by a pubkey? Taproot and BIP0322

Using wallets like XVerse, users can sign a message using their ordinal btc address, let's say bc1XXX, the message is hashed based on BIP0322. So I have: User wallet: bc1XXX Message hash: YYY ...
0 votes
1 answer
67 views

Signmessage with Raspiblitz

For an absolute beginner, how do I sign the new adress formats (taproot e.g.)? In Ride the Lightning (RTL) there is the possiblity to sign messages for lightning. But I need to sign from a specific ...
6 votes
3 answers
2k views

How to determine first byte (recovery ID) for signatures (message signing)?

I do realize that in bitcoin when we return the signature result for signing a message the first byte includes information for recovering the public key required for verification using a formula like ...
0 votes
0 answers
32 views

How to hash a message (tx message) to get message hash? [duplicate]

I am trying to create a raw TX and sign it. I know that to sign a transaction we need the message hash (here m) value which is double sha256 hash of something like this: 01000000 #Version 01 #Number ...
1 vote
2 answers
120 views

Error broadcasting SegWit transaction

I have this testnet transaction that I created: Version: 01000000 Marker: 00 Flag: 01 Input Count: 01 Input #1 TXID: 42a752fe4ebd0bdc69cb1b3724de6ccc364661028ab9c043526f3f7cb0571147 Input #1 ...
1 vote
0 answers
76 views

Message signing with airgapped wallet that doesn't support it

I need to implement message signing for various HWs, many of them support it on a firmware level, but some airgapped wallets like SeedSigner or Jade still don't. I was wondering if there's a way to ...
2 votes
1 answer
1k views

With Legacy bitcoin addresses deprecated, will Bitcoin Core no longer be able to sign messages from an address?

Bitcoin Core can only sign messages from legacy bitcoin addresses, in my experience. With legacy addresses being deprecated in the software, does this mean that Bitcoin Core will no longer be able to ...
2 votes
0 answers
272 views

How does OP_CHECKSIG work for Taproot script path spending?

I've been studying all the ways Taproot transactions can be spent and I can get all of them to work except for when script path spending is used and the script is executed. Transaction 0c045625... is ...
1 vote
1 answer
172 views

SIGHASH_SINGLE with no corresponding output

Transaction 99fc1e5c753459808bac56435b3d45f2fcf0dd73016ea14460d63e9ddf353714 is an interesting example. This transaction has 5 inputs and 1 output. All of the input scripts include 1 public key and 1 ...
4 votes
2 answers
312 views

Why does blockwide signature aggregation prevent adaptor signatures?

In a recent video about half signatures, Jonas Nick mentions that blockwide signature aggregation interferes with adaptor signatures and offering atomic swaps (I guess via PTLCs). I am confused about ...
3 votes
1 answer
485 views

Electrum: display redeem script of a P2SH utxo

I use Electrum with a multisig wallet. I would like to figure out how to prove ownership of a "coin". I understand that I need to share the whole redeem script so that it's hash can be ...
0 votes
1 answer
349 views

Signing a message vs NFT to prove ownership

What is the difference between signing a message using a Bitcoin address to prove ownership and NFT verification which will be used by Twitter?
1 vote
3 answers
96 views

Why can't I modify someone else's transactions, if I have their signature data?

As I know, signature system is adding signature to end of transaction. And doesn’t hash transaction, so others can know my signature. If I can send a message directly to the node, can I use other’s ...
2 votes
2 answers
124 views

why do we need to hash before we use a private key to digitally sign a transaction? isn't just using a private key enough?

why is a hash needed for digital signatures? isn't it redundant since the point of hashing is to ensure contents are not tampered with , which the digital signature can do as well (on top of ensuring ...
0 votes
2 answers
926 views

How can I sign message for a blockchain watch only bitcoin address

I have to verify sign message for one of my blockchain bitcoin address. I couldn't find sign message or private key option in More Options beside all my bitcoin addresses. I thought maybe I have to ...
0 votes
0 answers
287 views

Transaction signing and security: Different signing approaches

I am currently studying for an exam and reviewing a past one from the CS 251: Bitcoin and Crypto Currencies course in Stanford with the following question on transaction signing. I have written my ...
2 votes
0 answers
72 views

Why is adding s values in half aggregation insecure?

Jonas Nick an Tim Ruffing discussed in a presentation that summing up the s values in signature half aggregation would be insecure (without giving the reason) They presented a secure solution which ...
4 votes
1 answer
244 views

Why is full blockwide signature aggregation of schnorr signatures non-interactive?

I can only think of the MuSig paper describing how Rouge attacks are prevented by also committing to the public key of all signers. But as far as I understand the case of multisig is not the same as ...
0 votes
2 answers
318 views

signmessage and verifymessage CLI commands not accepting Address from getnewaddress?

I am trying the following commands on my v0.19.0.1 Core implementation: CLI signmessage $(CLI getnewaddress) <message> and the identical CLI signmessagewithprivkey $(bitcoin-cli dumpprivkey $(...
0 votes
1 answer
38 views

Distinguishing bitcoin deposits

If i had a central Bitcoin wallet, and then allowed 3 different people to deposit bitcoin into that address, would there be anyway to distinguish who they are, without knowing who's address is who, i ...
0 votes
1 answer
258 views

Can't Make Sense of Why OP_CHECKSIG Fails Here

I'm try to get to grips with verifying the signature of a P2PKH transaction. I have an example transaction: 9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1 I am trying to verify the ...
1 vote
2 answers
692 views

How does a hardware wallet interact with the bitcoin network?

I tried to understand the principle how the hardware wallet sends transactions to another Bitcoin address since it is not connected via full node to the blockchain. I found this answer: How do ...
4 votes
1 answer
190 views

What is the "value" in a Segwit sig hash?

The BIP143 docs state that the value is: "value of the output spent by this input (8-byte little endian)" If I have a single UTXO of value 10,000 sats and I'm using this as an input for a ...
15 votes
1 answer
6k views

What are the advantages of Schnorr vs ECDSA?

I understand that Schnorr signatures provide an improvement on ECDSA in that they are a fixed 64 bytes instead of the longer ECDSA sig format, however, I don't see how this is an advantage over ECDSA ...
1 vote
0 answers
122 views

How to use Digital Signature to Sign Unsigned Transaction?

so I was trying to sign my unsigned transaction: ...
0 votes
0 answers
98 views

How do I compute a private key, if I have two messages signed using the same nonce? [duplicate]

If I sign two messages with the same private key and nonce, it compromises security, making it possible to calculate the private key. I'm implementing a system (outside of bitcoin) where a message, ...
0 votes
1 answer
293 views

Relationship of R/S signature in between signed message and DER signature

this time is difficult for me to explain problem i was facing. i realize that R/S signature in DER signature is not match to the 1 in bitcoin signed message? Ok below is my say signed message. -----...
0 votes
1 answer
92 views

Is there some way to take advantage of the fact that I own 10 BTC without spending them or giving up control of them?

Is there some kind of "Bitcoin society" where I can instruct my Bitcoin Core to run a command which then spits out some kind of cryptographic code which verifies that I control/own the number of BTC ...
0 votes
1 answer
174 views

difference between signing a message and signing a p2sh

can i use the sign message function to sign the serialized hex for a p2sh transaction? Are the ecdsa functions used the same or are they different? It looks like the output is in a different format ...
3 votes
1 answer
453 views

I'm trying to create a new kind of escrow with bitcoin, not sure if it's possible

First off, I understand that the standard way to do escrow with bitcoin is a P2SH with a 2 of 3 multisig redeem script. I'd like to try and do escrow in the following way: names of 3 parties involved:...
0 votes
1 answer
51 views

Difficulty in verifying bitcoin-core signing keys

How can I verify bitcoin0.19 signature bwith gpg? I read I should use gpg --recv-keys signingkey, but I don't understand where is the file signiggkey. I tried to download Bitcoin Core Release Signing ...
10 votes
3 answers
51k views

online tool to play around with ECDSA public keys, message signature verification?

I realize that this question may be borderline bannable because it's asking for suggestions on tools, but it will really help newbies. This online tool allowed me to play around with hashes and to ...
2 votes
1 answer
233 views

how difficult is it to generating an ECDSA (or Schnorr) signature with a certain number of leading zeros?

If both the public key and the private key are known ahead of time (public knowledge), and the goal is to choose a message/nonce that generates a signature with, for example, a certain number of ...
3 votes
2 answers
2k views

Difference between Sign Message and Sign Transaction

Using "Sign Message" one can prove ownership of an address. This happens by signing a human-readable string using the private key belonging to the address. The owner then provides the address, message ...
1 vote
1 answer
163 views

Up to 4 Different Points within ECDSA/Public Key Recovery technique

In the answer to this question, it is stated that: Rearranging this equation you get rP = sR - mG, or P = (s/r)R - (m/r)G. Thus, it seems we can just compute the public key from the message and the ...
0 votes
1 answer
803 views

Error code -3 when signing message from gui?

I tried to sign a message from gui v18 and the debug console without success: With the popup it shows red text: "the entered address does not refer to a key. Please check the address and try ...
7 votes
1 answer
2k views

How is Public Key extracted from (message, digital signature, address)

I'm under the impression that a public key is revealed when you sign a message. Given these 3 inputs. P2PKH Address, Digital Signature, Message. Is the public key exposed? If so, how do you extract ...
3 votes
2 answers
2k views

How are Bitcoin Signed Messages generated?

Ledger Nano S and other pieces of Bitcoin software and hardware can sign messages using the private key associated with an address. Doing this, I get the following output: -----BEGIN BITCOIN SIGNED ...
0 votes
1 answer
88 views

Signature generation

I am trying to unwrap bitcoin transaction generation process. A bit confused about signing part. My understanding is the transaction is sha256'd, then sha256'd one more time, then ECDSA'd. Based ...
0 votes
2 answers
295 views

What is the command to sign a message using a segwit private key using electrum 3?

I want to sign and verify a message using a segwit private key that i generated with another application. How can I sign and verify a message using electrum 3 cli?
0 votes
0 answers
98 views

How do I import a wallet into Bitcoin core? [duplicate]

I have the public address, and the private key of a BTC wallet. How can I import this into bitcoin core so that I can use it to sign messages? I need to be able to sign a message to show that I ...
1 vote
2 answers
566 views

Using BitcoinJS - How do you verify a message using a segwit bech32 (bc1…) / P2SH (3…) addresses?

I created a signature from a message using my private key. But how do I verify this signed message using my segwit addresses of 3... or bc1...? How do I verify this using the BitcoinJS library?
1 vote
1 answer
2k views

How does a Doge public key is created from a private key? [closed]

I am looking for the differences between the creation of Doge public keys and Bitcoin public keys when inserting a private key. I am trying to make a small web-app that signs messages. There are a ...
2 votes
2 answers
709 views

Is It Possible to Prove Ownership of Public Key Hash without Public Key?

I am building a system where I would like the user to specify a public key hash of a wallet that they have control over in the event of tips, refunds, and/or otherwise needing to send value back to ...
0 votes
3 answers
744 views

What are the realistic system requirements to run bitcoin core for generating wallets, signing and verifying messages on a laptop?

I need to be able to verify messages and check that funds in wallets are valid and that the claimed owner possesses the private keys (hence checking messages signed). I know that I need to be able ...
0 votes
0 answers
98 views

What is a simple way to sign a message to verify that you possess the private key for a specific public address?

I need to explain to somebody step by step how to go through the process of signing a message to verify they own the private keys associated with an address containing funds. This is to ensure ...
4 votes
1 answer
705 views

How can I verify someone controls the private key behind a segwit address?

With a legacy P2PKH address, signmessage and verifymessage can be used to verify that the other party actually controls the bitcoin address in question. However, P2SH, P2WPKH and P2WSH addresses throw ...
7 votes
2 answers
6k views

How to sign a message using Bitcoin private key?

How does one create a proper signature for a given message using Bitcoin private keys? I have an input address of 5JeWZ1z6sRcLTJXdQEDdB986E6XfLAkj9CgNE4EHzr5GmjrVFpf or ...