All Questions
9 questions
2
votes
1
answer
247
views
Is my k nonce being re-used here?
I'm using bitcoin core 28.0 on Debian Bookworm. I enter the following into bash:
./bitcoin-cli signmessage "p2pkh-address-here" "abc123"
... and I get the signature output in the ...
- 10.4k
1
vote
1
answer
259
views
Anti-exfil protocol can't be verified on multiple hardware wallets
Regarding the nonce side channel attacks detailed in posts like this one by Blockstream. Which references this mailing list by Pieter Wuille. The idea is to add another layer of protection against a ...
CommunityBot
- 1
6
votes
1
answer
1k
views
Why is it important that nonces when signing not be related?
I understand that if nonces (usually denoted k in the signature algorithm) are related signing with the same public key that this reveals information about the private key. I would like to get a ...
- 1
0
votes
1
answer
74
views
Continuation question about nonce randomness and verification of the randomness by signing parties
Original: Can a signer recover their own signature's nonce `k`?
Note that under normal circumstances it is infeasible to randomly generate the same nonce, so either a non-random nonce has to have ...
- 110k
1
vote
1
answer
602
views
Can a signer recover their own signature's nonce `k`?
I am proofreading a blog post about nonce reuse. One point that comes up is whether someone could recover another person's private key if the other user reuses the same nonce. In that context, it was ...
- 77.9k
2
votes
1
answer
859
views
Can the difference be determined between two nonces k1, k2, having a linear relationship if the nonce and private key are unknown, i.e., k2 - k1 = n?
My question is related to weak signature vulnerability testing where a hypothetical attacker does not know the values of the nonce or private key itself, but can determine that the nonce 'k1' is ...
-2
votes
1
answer
1k
views
How to get bitcoin transaction nonce from transaction signature?
Subj.
Looking for a code for calculate/get bitcoin transaction nonce. Help me please.
???
Thank you.
- 54
0
votes
1
answer
208
views
Random Number In R Value , what is it actually, is it the same as Nonce in the blocks
I wonder about the random number in R value ...
if i am right , the R value is First part of the script signature which is combined of two parts (r,s)
r = Gk (elliptic curve scalar multiplication) Or ...
- 72.2k
1
vote
2
answers
4k
views
Nonce usage in ECDSA signing algorithm
I'm trying to understand the signing function secp256k1_ecdsa_sig_sign(), and I'm curious about the nonce usage here.
static int secp256k1_ecdsa_sig_sign(const secp256k1_ecmult_gen_context *ctx, ...
- 11