4 votes

Two private keys whose corresponding public keys have the same x-value?

Yes, trivially. If private key d has public key X coordinate m, then so does private key n-d, where n is the order of the curve (as n-d equals -d modulo n). This follows from a basic rule in elliptic ...
Pieter Wuille's user avatar
4 votes

Bitcoin keys explained?

Take a (random) integer from the permitted range, between 1 and the integer order of the elliptic curve base point G on secp256k1, i.e. between 1 and ...
Murch's user avatar
  • 75.2k
3 votes

Do I need to store my hardware wallet's derivation path?

I think if you’re using a wallet that uses BIP39 and BIP 44 standards (many popular wallets do), then the derivation path is standardized. That was a major benefit of those BIPs vs every wallet doing ...
Rex Everything's user avatar
3 votes
Accepted

What does it mean that the security of Bitcoin public keys and 256-bit ECDSA is 128 bits?

What does it mean that the security of 256-bit ECDSA, and therefore Bitcoin keys, is 128 bits? I mean, if I have approximately 2^256 possible points on the elliptic curve (thus possible public keys), ...
Pieter Wuille's user avatar
2 votes
Accepted

Can addresses be linked to "wallets"?

No one can tell whether two addresses were generated from the same HD seed or generated by the same wallet. The process is designed to produce addresses in a way that is mathematically ...
RedGrittyBrick's user avatar
2 votes

In bitcoin core can ScriptToUniv give us wallet address of public key?

There is no address format that can produce a P2PK script. You can produce a P2PKH address from a pubkey with the process that you describe, but that address will result in a P2PKH script. This is a ...
Ava Chow's user avatar
  • 70.4k
2 votes

Bitcoin keys explained?

Maybe that's the documentation that answers your question: https://learnmeabitcoin.com/beginners/keys_addresses https://github.com/bitcoinbook/bitcoinbook/blob/develop/ch04.asciidoc https://learn....
Greg Tonoski's user avatar
2 votes

How do I get my public address in Bitcoin Core?

Use the following command to get all the receiving addresses. bitcoin-cli listreceivedbyaddress 0 true '0' represents no minimum number of confirmations. 'true' is for including addresses which have ...
Kirti Singh's user avatar
2 votes

Public key factors - but what's next?

Let's say I found (I know, impossible) public key factors. Bitcoin public keys are coordinates of points on the secp256k1 elliptic curve. They are not integers, and thus factoring is not an operation ...
Pieter Wuille's user avatar
2 votes

Feedback system possible

No metric is known that can tell you whether you're getting closer or not to a certain target. It's of course not impossible that such a metric might exist, but we do not know. If such a metric ...
Pieter Wuille's user avatar
2 votes
Accepted

Do we need a taproot commit for multisignatures if there is no script path, but we are using the MuSig2 protocol?

Is there any need for addition key tweaking if we use MuSig2 protocol for multisignature? Citing BIP341: Why should the output key always have a taproot commitment, even if there is no script path? ...
Pieter Wuille's user avatar
2 votes
Accepted

Is it possible to calculate the correct y coordinate from x coordinate given only x coordinate without any prefix

There is no known relation between the parity of the Y coordinate and any property of the private key (like whether it's in the low or high half). In BIP340, which defines the Schnorr-based digital ...
Pieter Wuille's user avatar
1 vote
Accepted

deriving the master public key and the btc address from seed phrase of electrum wallet

You cannot convert an Electrum seed phrase to a BIP39 seed phrase, because in the process of deriving the master private keys, both algorithms use a different salt. This means, you cannot use Electrum ...
Zenul_Abidin's user avatar
1 vote

How to set the output script of coinbase transaction

Bitcoin addresses are standardized human-readable notations for certain classes of specific scriptPubKeys. While there is nothing invalid about scripts outside of these standard forms, there is ...
Pieter Wuille's user avatar
1 vote

Is it possible to reduce the field size without disrupting generation of public keys?

i was wondering if its possible to reduce to field to a 130 bit or lower No, that would be woefully insecure. The security of elliptic curve cryptography scales with the half of the field size. A 133-...
Pieter Wuille's user avatar
1 vote

Does the 25th password make the wallet harder to crack?

Adding a passphrase to a seed phrase does make it harder to guess the combination but that isn't really relevant. The seed phrase alone is hard enough. I think people would add a paraphrase for ...
RedGrittyBrick's user avatar
1 vote

Does the 25th password make the wallet harder to crack?

Mastering Bitcoin. A highly recommended read if you want to have a deep dive. Generating mnemonic words Create a random sequence (entropy) of 128 to 256 bits. Create a checksum of the random ...
serge's user avatar
  • 31
1 vote

Bit coin core Settings/Receiving addresses

Settings/Receiving addresses [Window/Receiving Addresses] In Bitcoin core, under the menu "Window", "Receiving Addresses" ... ... you'll normally see a list of addresses created ...
RedGrittyBrick's user avatar
1 vote
Accepted

What does a digital signature scheme need to have in order to be used (indirectly) in Bitcoin?

At a technical level, all that matters is the verification equation. If your scheme ends up with keys and signatures on-chain that verify using ECDSA (or BIP340 for Taproot outputs), the transaction ...
Pieter Wuille's user avatar
1 vote

How to find out if public keys have been used in other transactions

For Bitcoin, you can use block explorers like Blockchain.info, Blockchair, or a blockchain API like Blockcypher. They often provide detailed information about transactions, including inputs and ...
Mani T's user avatar
  • 187
1 vote

BTCPayServer - importing wallet using zpub

So at the end, there was some part of .NET SDK missing on the system. Managed to pull the log from NBXplorer service. System.IO.FileNotFoundException: Could not load file or assembly 'System.Threading....
Gusep's user avatar
  • 31
1 vote

Do I need to store my hardware wallet's derivation path?

Generally speaking, is this because different derivation paths can yield, ultimately, different public keys, and thus if I don't have my derivation path saved, I may be unable to reconstitute a wallet ...
Ava Chow's user avatar
  • 70.4k
1 vote

How would we know the real Satoshi?

The way it works is by the public/private key cryptography Satoshi has shared his public key used to verify signatures here: https://bitcointalk.org/Satoshi_Nakamoto.asc -----BEGIN PGP PUBLIC KEY ...
Daniel Georgiev's user avatar
1 vote

Is the G in Elliptic Curve same for Bitcoin and Ethereum?

According to the other answer they do share the same G, however there is a slight difference between the term address and the term public key. An address generally is derived from a public key. The ...
Poseidon's user avatar
  • 693
1 vote

How would one extract the list of public keys from Electrum wallet?

The following code worked for me in the Electrum console and was able to give me all of the addresses in a single command. for i in listaddresses(): print(i + " = " + getpubkeys(i)[0])
okw's user avatar
  • 212

Only top scored, non community-wiki answers of a minimum length are eligible