Questions tagged [signature]

This tag should be used for questions regarding digital signatures. A digital signature proves that the owner of a private key produced or endorsed a given message. These are used in transactions to prove that an output can be spent in a transaction.

Filter by
Sorted by
Tagged with
1
vote
1answer
381 views

How OP_CHECKSIG knows the source of sig in pay to pubkey hash transaction

https://en.bitcoin.it/wiki/Script#Standard_Transaction_to_Bitcoin_address_.28pay-to-pubkey-hash.29 The last step of pay to pubkey hash transaction is to check the signature of the previous ...
1
vote
1answer
1k views

How does a Doge public key is created from a private key? [closed]

I am looking for the differences between the creation of Doge public keys and Bitcoin public keys when inserting a private key. I am trying to make a small web-app that signs messages. There are a ...
1
vote
3answers
728 views

Public key cryptography question - Is Private or Public key used to sign? Confusion between which key is used to sign and which is used to encrypt

I am relatively new to cryptography and blockchain and am learning about how public key cryptography works, and its application in Bitcoin's environment. I read two different articles , the 1st which ...
1
vote
1answer
247 views

How transaction becomes confirmed by miners if InputScript has only the Sig

Please help me to understand how bitcoind client verifying TX with Input Script which consist only from the Sig. For example TX 6D5DF6C0D66CFFC25CC1ABA3655952D7B081ED4E9EA3B70FCD964FDBBA01E91E has ...
1
vote
1answer
499 views

ScriptSig field during P2PKH transaction signature

In P2PKH transactions, the content after signing the transaction contains: <signature(with hash_flag)><public_key>. However, since the signature can't sign itself, during the signature ...
1
vote
1answer
323 views

Why transaction is signed with locking script from the input transaction?

Finally, I've successfully made a raw transaction with Python and this is the last thing, which is totally mistic for me. In my case, here's the input transaction and it's locking script is: OP_DUP ...
1
vote
2answers
89 views

Is there any tech that uses a signature as a private key?

I've been pondering how the Lightning Network will work when one of the parties in a channel tries to cheat. It seems that publishing a transaction that shouldn't be published (a "bad act") ...
1
vote
1answer
166 views

Why can't a transaction be redirected after it is signed? [duplicate]

Scenario: Step 1: User-1 initiates the TXN-1 to pay to User-2 and the TXN is not yet confirmed with the ongoing block POW. Step 2: What prevents fraudster (anyone a miner or someone listening/...
1
vote
1answer
281 views

OP_EQUALVERIFY Problem

I'm making a full-service wallet, I already made the UTXOs selection algorithm and now I want to push the transaction hex bytes. It works when I push only a transaction with only 1 input, but if I try ...
1
vote
1answer
1k views

OP_CHECKSIG signature hash type 0

On the Bitcoin Wiki's OP_CHECKSIG documentation: Firstly always this (the default) procedure is applied: the public key and the signature are popped from the stack, in that order. If the ...
1
vote
1answer
3k views

same R value is used for two different addresses? finding z1 and z2 value and privatekey

txid1 txid2 input script 1 304502206bcc247f1259262b4035bfa84f0397a69f69baa01659daaf94fe1164b650c86a022100a044b38e8264a1c928ddd28b4657aa7109d1ea30e911208c7ce57abcb1451fe601 ...
1
vote
2answers
567 views

blockchain checksig fail

i'm attempting to verify a checksig from a transaction in the live blockchain. it is failing on my debian jessie pc with openssl 1.0.1k, failing on my ubuntu 12.04 virtual machine with openssl 1.0.1 ...
1
vote
1answer
550 views

Double Counting SigOps to Prevent CPU Exhaustion Attacks

In the bitcoin v0.9.3 source: https://github.com/bitcoin/bitcoin/blob/v0.9.3/src/main.cpp ConnectBlock() calls CheckBlock() as one of the first things it does. https://github.com/bitcoin/bitcoin/blob/...
1
vote
1answer
81 views

Is it possible to create a transaction with 2txin and 2txout?

Is it possible to create a transaction with 2txin and 2txout? If it is possible, then how does one sign this transaction? Or do I have to create two separate transactions? 1txin 1txout and 1txin ...
1
vote
1answer
31 views

bip143 witness formatting

in bip143 thet define a witness signature. In the first example there is a witness broken down witness 00 02 ...
1
vote
1answer
162 views

How to Verify P2SH Signature

I am trying to debug an issue where i believe i might have a bad signature but i am trying to figure out how to approach it. What is this a signature of. Private key + what (redeem script? entire raw ...
1
vote
2answers
132 views

Multisignature technology in bitcoin - math and code

I am interested in the math and code behind bitcoin multisignature technology. I've been looking for actual code that creates a multisignature address/pub key, and verifies transactions/digital ...
1
vote
2answers
1k views

Nonce usage in ECDSA signing algorithm

I'm trying to understand the signing function secp256k1_ecdsa_sig_sign(), and I'm curious about the nonce usage here. static int secp256k1_ecdsa_sig_sign(const secp256k1_ecmult_gen_context *ctx, ...
1
vote
1answer
1k views

How the Recipient's public key is used in bitcoin transaction

In the second paragraph the white paper by Nakatomo, we have this image: It says a coin is a set of digital signature. For what I understand the whole process is the following: Hash together the ...
1
vote
2answers
268 views

Error when sending rawtransaction

I tried to write a transaction on my own in python to better understand how things work; when i decode the raw transaction, it seems properly written. When I use the rpc method sendrawtransaction I ...
1
vote
1answer
558 views

Understanding BIP 143 [hash computation, lockTime, sequence number, witness format]

I'm trying to grasp some of the concepts presented in BIP 143. These are the things I'm stuck on: (1) A new hash format is presented. This new format is used to create a hash, which when signed with ...
1
vote
1answer
319 views

How can I verify the PGP signature of https://liteaddress.org on Windows?

Suppose I want to download a copy of https://liteaddress.org in order to run it offline in a safe environment. Then how can I verify that the website hasn't been hacked? How can I verify that the ...
1
vote
1answer
83 views

How many signatures are there in one non-multisig transaction

I checked this How is a transaction's output signed?. I need clarification for: For each input there is one signature, so there are as many signatures as there are inputs? Why is that so and ...
1
vote
1answer
427 views

Signature scheme for P2SH

I am trying to sign a raw transaction that spends output #2 (txindex 1) from this transaction: 267c6d75851efa18afb7edeb2da00c09afc575231db84b3277fc7ea3e174ecbd The output is a 1-of-4 multisig P2SH ...
1
vote
1answer
33 views

When user 'A' creates a transaction using scriptpubkey, do they also sign a message with their private key?

I understand a transaction in Bitcoin is created in two parts: 1) Sender 'A' creates a claim condition using scriptPubKey 2) Recipient 'B' proves ownership of the recipient address using scriptSig ...
1
vote
1answer
2k views

Proof of address ownership

This question appears many times on SO, but there's something in the answers I'm not getting. I'm designing a system predicated upon API calls made to blockchain.info, but I'm having real trouble ...
1
vote
1answer
67 views

If newer versions of bitcoin and or bitcoin cash don't allow 0x04 uncompressed public keys, what do you do if you have an address based on one?

So if you have an address with coins in it that uses an uncompressed public key (preceeded by a "04") then how can coins from that wallet be utilized with a network that doesn't allow such public keys?...
1
vote
1answer
61 views

Is the HashOfThingToSign (used in signature generation) the same for each input of a transaction or is it different for each input of a transaction?

Does a transaction with 50 inputs have 50 different hashofthingtosign, one for each input, or does it just have one that is used for all the input scripts?
1
vote
1answer
74 views

Complex Transaction Signing?

I am trying to recreate this complex transaction in my own project, but it seems my scriptSigs are off. My guess is that I am assembling the rawTX incorrectly, and my best explanation would probably ...
1
vote
1answer
1k views

Sending transaction with Python + raw protocol

Two days ago I've found a few articles, about using raw bitcoin protocol, and now I'm still trying to send a transaction. My code is based on this class, and if I understand all of this bitcoin magic ...
1
vote
1answer
520 views

How does ripple verify the signature?

As I understand, the client send the following information to server 1.the hash of the message, 2. public key 3. signature made by private key And the server verified the signature with the ...
1
vote
1answer
339 views

How to extract the signature of a transaction using bitcoinj

I am trying to extract the signatures from a transaction. What is the best way to do this given a com.google.bitcoin.core.Transaction object I just received from the network?
1
vote
1answer
107 views

Bitcoind need blockchain to sign transaction

I'm trying to sign a transaction using bitcoind via rpc. Here is the request I send. signrawtransaction "...
1
vote
1answer
54 views

Can I sign and redeem many outputs at the same time? (shrink the size of a tx Input)

I'm looking at this transaction that is redeeming many historical outputs from the same address. When I look at the blockchain, it seems pretty clear there is redundancy here of the public key being ...
1
vote
0answers
32 views

Creating Witness Signature: non-mandatory-script-verify-flag (Signature must be zero for failed CHECK(MULTI)SIG operation)

So I am trying to do my own witness signatures as described in bip143. I have code that correctly verifies the example signature, so I thought I had a hold of the basic signing and verification. I ...
1
vote
0answers
45 views

How to use Digital Signature to Sign Unsigned Transaction?

so I was trying to sign my unsigned transaction: ...
1
vote
0answers
25 views

Is there any 'Metamask-like' app for Bitcoin? [duplicate]

9 months ago someone asked this same question: Metamask-like web3 inject for bitcoin but I was wondering if there had been be any changes since then. I'm currently looking for a Chrome extension that ...
1
vote
0answers
27 views

signing message [duplicate]

I'm trying to sign a message with the Bitcoin Core version v0.19.0.1 wallet. But when I do I see the message "the entered address does not refer to a key." is there a way to sign a message with the ...
1
vote
2answers
2k views

How to find Reused R values

I use software from https://github.com/ca333/rng-scanner , I try to find r that is reused. from the software I found results Bitcoin Address : 1GQdrgqAbkeEPUef1UpiTc4X1mUHMcyuGW In Input NR : 141 ~ ...
1
vote
1answer
482 views

Cannot sign txn with change address using bitcoinjs-lib psbt

I am having a difficult time figuring out how to sign a spend from a change address. I get Error: cannot sign for this input with the key <value>. The initial transaction works fine, where I ...
1
vote
0answers
45 views

How can I check my transaction signature is correct?

I have tried recreating the exact transaction from "Appendix B: Funding Transaction Test Vectors" from BOLT 3 from the Lightning RFCs. My transaction looks exactly the same when parsed, except my ...
1
vote
0answers
58 views

Is possible extract the original script P2MS from the transaction locked with the P2SH address?

This is a stupid question because if the P2SH contains the hash160 (and the hash160 contains the sha256) of the P2MS doesn't possible return to the original hex P2MS. So, but for verifying the P2SH I ...
1
vote
0answers
87 views

How to sign an Altcoin transaction manually with 2 inputs and 2 outputs

So i'm working with the altcoin denarius which has the following raw TX structure. This is a transaction I am try to sign: Original: ...
1
vote
1answer
149 views

Following SegWit implementation, is BIP-146 signalling and implementation still on the docket?

Is BIP 146, which defines using the low S value, still on the docket to be signalled and implemented given that SegWit fixed the txid malleability issue by moving the witness outside the transaction? ...
1
vote
0answers
39 views

Can you use Schnorr to sign inputs individually?

Can personA build a transaction and sign his inputs, then personB signs his and that be added into one transaction using Schnorr. Or are SIGHASHes still needed?
1
vote
0answers
60 views

aggregated signatures for combining payments over a low bandwidth mesh network

Background I'm researching how in a low bandwidth mesh network payment transactions from nodes can be combined to reduce the bandwidth used for payments. Aggregated signatures seem like a useful ...
1
vote
0answers
215 views

Privacy risks with a hardware wallet

I'm trying to understand the privacy risks with a hardware wallet like a Trezor, Ledger, or similar. I understand the common workflow with these wallets is that you use an SPV bitcoin client which ...
1
vote
1answer
705 views

How sign the first transaction's signature?

In bitcoin, each transaction's signature is signed with previous owner's private key. Then, how sign the first transaction's signature?
1
vote
0answers
3k views

Same identical R value of all transaction not provide corresponding privatekey

ECDSA Signature and the “z” value from above link learn calculation of z value and to get private key https://blockchain.info/tx/9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1 ...
1
vote
0answers
95 views

signing colored assets to identify worthwhile assets

With colored coin and similar solutions, anyone can create an asset. Using counterparty as an example, this gets out of control very quickly with no way to determine "good" assets easily (http://www....

1
4
5
6 7 8