People who code: we want your input. Take the Survey

Questions tagged [signature]

This tag should be used for questions regarding digital signatures. A digital signature proves that the owner of a private key produced or endorsed a given message. These are used in transactions to prove that an output can be spent in a transaction.

Filter by
Sorted by
Tagged with
1
vote
2answers
2k views

How to find Reused R values

I use software from https://github.com/ca333/rng-scanner , I try to find r that is reused. from the software I found results Bitcoin Address : 1GQdrgqAbkeEPUef1UpiTc4X1mUHMcyuGW In Input NR : 141 ~ ...
1
vote
1answer
79 views

What does bitcoin do that prevents someone from using your coins by just generating a key pair and saying “you” sent those coins?

I think I'm missing and understanding about the current process of how your wallet works and how the transactions are signed. For example, if I'm user "A" and there exists a transaction from ...
0
votes
1answer
24 views

What is the data structure of the signature cache in Bitcoin?

There is a signature cache in Bitcoin, which is used to cache the result of signature verification to avoid extra signature verification. What data is stored in the signature cache? Is it stored in ...
0
votes
1answer
57 views

Orderly Transition Away from ECC? Or Bitcoin to zero?

Let's say asymmetric public key cryptography is wide open, and can be broken using a public key or the signature. Namely, that I can determine the private key using the information revealed in a ...
1
vote
1answer
38 views

Are high-s ECDSA signatures forbidden in segwit witnesses?

I must have looked that up five times by now, but did segwit actually forbid high-s ECDSA signatures in witnesses, esp. in standard single-sig constructions such as P2SH-P2WPKH or P2WPKH? Or are high-...
1
vote
1answer
147 views

Following SegWit implementation, is BIP-146 signalling and implementation still on the docket?

Is BIP 146, which defines using the low S value, still on the docket to be signalled and implemented given that SegWit fixed the txid malleability issue by moving the witness outside the transaction? ...
0
votes
2answers
57 views

How to prove wallet ownership? [duplicate]

Context I would like to verify being A has access to a wallet and hence would like to ask them to pay a minimum amount to a particular wallet address owned by someone other than me, e.g. ...
0
votes
0answers
15 views

Sign rawtransaction with private key without running a btc node

I have a tx raw and I want to sign it with my private key without running the btc node is there any library in C/C++ that I can do it?
3
votes
1answer
50 views

Are UTXOs signed with a private key?

Are UTXOs signed by a private key? I'm trying to understand exactly which parts of Bitcoin use public and private keys. You need a private key in order to generate transaction output, and to create a ...
2
votes
1answer
186 views

NBitcoin get signature, use spending P2SH transaction with non-standard script

After creating a new NBitcoin transaction (with a single pay-to-script hash input and multiple outputs), is there any way to calculate the transaction signature and manually put it in the inputs[0]....
3
votes
1answer
34 views

How to verify a lnurl-auth callback with python

I want to create a Python implementation of an lnurl-auth server. I started a quick HTTP server to be the callback url, and captured the signed callback sent by BLW on Android. ?tag=login &k1=...
0
votes
1answer
62 views

How can be proven that a signature is valid with it's public key

If someone wants to make a transaction, they need to sign the transaction data with their private key. For example Sign(transactionData, privateKey) creates the signature. What is exactly this Sign ...
2
votes
1answer
1k views

How do I get hash to verify transaction?

If I have the public key and signature for a transaction how do I get the hash value that is used in verify(hash, sig, pubkey). I want to know how to work backwards from a raw transaction to get it, ...
4
votes
1answer
179 views

Are Bitcoin's blocks signed by the miner?

To my understanding, at no point in the Bitcoin Whitepaper does it say that blocks are signed by the miner. However, one could see the advantage of having blocks signed. Thus I wonder if in the ...
3
votes
1answer
5k views

manually signing bitcoin transaction

I'm trying to create a BTC transaction with one input and two outputs, one for change and one OP_RETURN to anchor data. And I'm doing all of that on my regtest backend. The raw unsigned transaction is ...
3
votes
2answers
321 views

How to calculate P2WSH signatures with CODESPERATOR?

I read the bip143, but didn't understand how to calculate the scriptCode of p2wsh. bip143 told us: A new transaction digest algorithm is defined, but only applicable to sigops in version 0 witness ...
4
votes
1answer
1k views

Building Signed Bitcoin Transaction in Java

I have been attempting to build my own raw transaction generator in Java which I can then broadcast on the testnet network. The problem is when I attempt to broadcast the transaction it says there is ...
0
votes
0answers
15 views

Locally Sign transactions Blockcypher API

I'm having a problem that I can't solve since yesterday with the blockCypher APIs when I try to create a new transaction and submit it. https://www.blockcypher.com/dev/bitcoin/?shell#creating-...
7
votes
1answer
549 views

Why is there no such thing as a redirected, forged, or fake transaction?

In the past, we had numerous questions about "fake" or "forged" transactions. Such transactions could supposedly be created even without holding any bitcoins, yet would end up in the mempool or even ...
0
votes
0answers
19 views

RPC to sign PSBT with private key

What is the PSBT related RPC which works similar to signrawtransactionwithkey ?
0
votes
1answer
100 views

Deleting Electrum wallet and setting up new one

I set up an Electrum wallet before I learnt that you should verify the signature. While I went straight to the electrum.org website to download it, I would still like to be secure, just in case. So I ...
4
votes
1answer
72 views

Why is the Schnorr verification formula working and actually verifying the validity of a signature?

Reading the bottom of page 2 of the Musig Paper we can find that a Schnorr Signature for a cyclic Group G of prime order p with generator g is a tuple (R,s) where R = gr for a random secret r and s=r+...
6
votes
1answer
548 views

Will Schnorr Multi-signatures completely replace ECDSA?

I stumbled upon the fact that schnorr signatures will most probably replace the current ECDSA system in a future BIP. Is it worth learning about ECDSA or this will become obsolete/useless/confusing ...
0
votes
0answers
28 views

Can Block-version signalling still be implemented and how to do that with the current code base?

There is a generation of softforks used the block header's nVersion field for signalling (up to the year 2015). Each of those used a subsequent version numbers (BIP34 used version 2; BIP66 used ...
9
votes
2answers
5k views

Transaction signature generation

When one sets up a transaction, the input of the transaction needs to have a script with a signature to show that you can spend those coins. Which fields of the previous and current transactions need ...
0
votes
1answer
25 views

How New Bitcoin Addresses not using Signature ? Only witness or Very Short Signature?

I have Noticed Something strange to me Newly Used Bitcoin Addresses show repeated very short Signatures and Multiple Witness ?? and Some not even any signature for the transaction ? what is happening ...
0
votes
1answer
24 views

Distinguishing bitcoin deposits

If i had a central Bitcoin wallet, and then allowed 3 different people to deposit bitcoin into that address, would there be anyway to distinguish who they are, without knowing who's address is who, i ...
0
votes
0answers
44 views

blockchain scanning

Hello friends please let me know that is there any script that can scan the entire blockchain and extract the signature values and find the match of given input. lets suppose i give the input "...
3
votes
2answers
235 views

Why is the signature hash different for each input in a multi-input transaction?

In pre-BIP143 signature hashes, I know that the signature hash differs because you have to substitute the previous scriptPubKey for each input and thus the serialization changes. The question is why? ...
3
votes
1answer
97 views

What is the O(n^2) signature hashing problem and how does SegWit solves it?

One of the many benefits of SegWit is that it solves the O(n^2) signature hashing problem. What exactly is the O(n^2) hashing problem and how segregating signatures to separate witness field solve it?
5
votes
1answer
270 views

ScriptSig content during signature (quadratic hashing)

As far as I know, the quadratic hashing problem came from the fact that every time a transaction is verified (or signed), the "unsigned transaction" that is hashed and verified changes depending on ...
0
votes
0answers
16 views

How to create signature for the payload (data)using private key in java with bitcoinj? [duplicate]

I have private key as 'cUN9LNcEC54HAbWAwUs6coPSc72TcQYzxf4qSqdHJPVKSapeHzFj' and payload as 'hello', now how to create the signature for this payload using private key in java with bitcoinj library? ...
0
votes
2answers
69 views

How is the random number R for transaction signatures created?

I wonder about the random number used in signatures that result in R values ? x coordinate R = G(k) How is it created? Does it have a specific chars length? Is there a specific random generator used, ...
2
votes
1answer
68 views

p2pkh vs. p2pk keeping public key private

I just got into learning Bitcoin programming through Jimmy Song's Programming Bitcoin. Jimmy says that some of p2pkh's advantages over p2pk include: a smaller ScriptPubKey keeping one's public key ...
0
votes
1answer
38 views

Random Number In R Value , what is it actually, is it the same as Nonce in the blocks

I wonder about the random number in R value ... if i am right , the R value is First part of the script signature which is combined of two parts (r,s) r = Gk (elliptic curve scalar multiplication) Or ...
6
votes
2answers
2k views

How are SIGHASH flags encoded into a signature?

This page describes SIGHASH flags: OP_CHECKSIG extracts a non-stack argument from each signature it evaluates, allowing the signer to decide which parts of the transaction to sign. Since the ...
0
votes
1answer
52 views

Can't Make Sense of Why OP_CHECKSIG Fails Here

I'm try to get to grips with verifying the signature of a P2PKH transaction. I have an example transaction: 9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1 I am trying to verify the ...
0
votes
1answer
55 views

Error while broadcasting the raw bitcoin testnet transaction

I am trying to create a simple P2PKH raw bitcoin testnet transaction from the scratch. Here is the information about the transaction: hash of the UTXO consumed - ...
18
votes
2answers
14k views

ECDSA r, s encoding as a signature

An ECDSA algorithm when signing a given messages produces a pair of outputs, r and s. How, given a sigStr from a Tx can one extract r and s? Are they just concatenated byte arrays of a specific length,...
9
votes
3answers
20k views

ECDSA Signature and the “z” value

The following link contains details on how to reverse the ECDSA signature if given two identical "R" values. http://www.nilsschneider.net/2013/01/28/recovering-bitcoin-private-keys.html I have read ...
2
votes
1answer
1k views

Can't find correct z1 & z2 for transaction

I've been trying to understand the issue and repeat Willem Hengeveld's answer, but I think I'm failing at getting correct script for hash. I'm looking for this transaction, my scripts are: ...
4
votes
1answer
221 views

Why does Bitcoin use ECDSA, instead of plain old hashing, to secure transaction outputs?

For example, let’s say I pick a random secret and hash it. Now, in the hypothetical hash-based scheme, my hash effectively replaces my public-key hash, and my random secret effectively replaces my ...
2
votes
2answers
74 views

Does every transaction have the same signature?

I want to know whether the bitcoin network generates the same signature for each transaction, because people have only one signature?
0
votes
1answer
55 views

signing multiple input raw transaction - algorithm and sighash types [duplicate]

I have an unsigned raw transaction: ...
3
votes
1answer
81 views

What does signing a transaction mean?

What do people exactly mean when they say the person "signs" the transaction to transfer bitcoins? Is it decrypting the previous output with your private key and encrypting it with the new ...
0
votes
1answer
90 views

How can I sign a bitcoin address that is on a paper wallet?

I have a bitcoin address that shows I held the BTC prior to December 2019. I need to verify this but as the address refers to a paper wallet I don't seem to be able to do so. If I move the coin to ...
0
votes
2answers
2k views
0
votes
1answer
40 views

Error: Non-canonical DER signature when attempting to broadcast signed Segwit Transactions

I'm trying to build a native Segwit transaction programmatically, however, whenever I attempt to broadcast the transaction, it returns this error: non-mandatory-script-verify-flag (Non-canonical DER ...
3
votes
1answer
50 views

What is the “value” in a Segwit sig hash?

The BIP143 docs state that the value is: "value of the output spent by this input (8-byte little endian)" If I have a single UTXO of value 10,000 sats and I'm using this as an input for a ...
-1
votes
1answer
102 views

How to get the raw signature data of a transaction?

With the use of segwit, signature data is no longer part of transaction body and thus can’t be retrieved from block explorers. So is there a Bitcoin rpc method in order to get it directly without ...

1
2 3 4 5
8