Questions tagged [cryptocurrency]

A cryptocurrency is a digital currency powered by cryptography. This tag is applicable only to Q&As about the cryptographic mechanisms used by a currency, not for questions about economy, usage, or acquisition of any particular currency. Please note that Stackexchange has dedicated websites for Bitcoin, Ethereum, Monero, etc.

Filter by
Sorted by
Tagged with
1
vote
1answer
31 views

What if the hash code of the genesis block (first block in the block chain) is changed?

If so, what would happen? And if not, what are some limitations to it? The reason I am asking is because I just started getting into the cryptocurrency and am very interested in the cybersecurity ...
1
vote
0answers
16 views

Post-quantum aggregate / multi signatures

Are there any practical post-quantum aggregate / multi signatures? Currently, the aggregate / multi signature schemes seem to be limited to pre-quantum elliptic curve assumptions only, e.g., [BDN18], [...
0
votes
0answers
20 views

Whose to stop the coinbase devs from just draining all accounts and running of with the money? [migrated]

I have been wondering, what would happen if the coinbase developers agree to drain all the funds of all their accounts and run off into hiding? Its not like anybody will be able stop them or return ...
1
vote
0answers
41 views

Proof of membership on a merkle tree

I read the zcash paper recently. But I have been puzzled by a question. How did the authors prove that the coin commitment appears as a leaf of a Merkle tree with root rt? Apparently, the authors ...
0
votes
0answers
19 views

Why is Bitcoin Core full node so slow to sync? [on hold]

After 12 hours, progress changed from progress=0.533751 to progress=0.541254, less than 1% progress. ...
-1
votes
0answers
23 views

How to identify cryptocurrency used by the public key of the recipient?

I though that it would be an easy task, but I can't seem to find any online resource to help me with it. Say, if I have a cryptocurrency key of the recipient, how can I tell the name/type of the ...
1
vote
0answers
43 views

How does ZK-snark work in zcash?

For a public one-way function $f()$, we can use zero proof to prove I know some secret $x$, such that the output of $x$ is a specific number $y$. However, in zcash, I need to prove that I have some ...
1
vote
0answers
43 views

Is the 51% attack the only technical reason no country will ever adopt Bitcoin as a state currency? [closed]

Is the 51% attack the only technical reason no country will adopt Bitcoin as a state currency? Let's suppose a country with a GDP size less than 300 Billion USD adopt the Bitcoin as an official ...
25
votes
1answer
7k views

Why hashing twice?

I'm trying to understand the Bitcoin protocol, and sometimes see instructions like this: The TransactionId is defined by SHA256(SHA256(txbytes)) or The hash of the public key is generated by ...
7
votes
3answers
3k views

How to deal with collisions in Bitcoin addresses?

When creating a Bitcoin account, you need to issue a couple of private/public ECDSA keys. Then, you derive your account address by taking a 160-bit hash (through SHA-256 and RIPEMD) of the public key ...
2
votes
2answers
338 views

Is there a way to bruteforce the private key of this cryptocurrency altcoin?

In the end of 2013 or the beginning of 2014, I bought 80 000 Applecoins (APC) for 0.1 Bitcoins and got another ten by an airdrop, so I had a total of 80 010. I never spent the coins, and when a ...
0
votes
1answer
109 views

Ethereum RLPx protocol for inter-node communication - flaws in the encryption

Ethereum uses RLPx/devp2p for inter-node communication. The protocol is encrypted using Elliptic Curve Integrated Encryption Scheme (see ref) Under Known-Issues I found this paragraph: The RLPx ...
2
votes
2answers
139 views

Would SHA-256(SHA-256(x)) produce collisions?

Was reviewing some Bitcoin public-key hash literature and the use of RIPEMD-160 and the SHA-256 as below: RIPEMD160(SHA256(ECDSA_publicKey)) The Proof-of-work ...
1
vote
2answers
64 views

How does ECDSA signature verify work in EOS and ETH/BTC, compare to standard (on text book I mean)

I have been studing ECDSA signature/verify for a while. By my understanding: the standard ECDSA signature/verify process (which we find on text book) are like below: - A sender combines message and ...
7
votes
1answer
1k views

Elliptic curve cryptography related key attacks [closed]

This question is an extension of Families of public/private keys in elliptic curve cryptography As described above, bitcoin "type 2" deterministic wallets use a root private/public key pair, where ...
-1
votes
1answer
114 views

Double hash question [closed]

I would like a valid Bitcoin address (derived from a private key created by rolling a pair of hexadecimal dice 32 times) to be the private key of any private / public cryptography. So if I encrypt a ...
0
votes
2answers
223 views

19 out of 24 words of BIP39 passphrase (brute-force last 5?)

I have managed to lose 5 words of my 24 word Ledger Nano S recovery phrase. I have words 1-19 but I am missing words 20-24. I have significant holdings on the wallet so would very much like to recover ...
3
votes
1answer
114 views

How can I generate a deterministic evenly distributed random number in a blockchain

Here's the hypothetical. There's a blockchain, which for the sake of simplicity, is modelled around Bitcoin and proof-of-work. My goal, is that for each mined block, rather than a set reward (12.5 ...
0
votes
1answer
58 views

would parallel crypto mining work

Hi everyone I was wondering would it be possible to mine a cryptocurrency like bitcoin in parallel. I have read a little about mining pools https://en.wikipedia.org/wiki/Mining_pool , But that's not ...
0
votes
1answer
59 views

Bitcoin mining nonce and birthday attack

Having read the basics of mining and this about SHA256 (probabilistic?) partial preimage possible? and SAT solving - An alternative to brute force bitcoin mining, I have the following question: ...
0
votes
1answer
156 views

The Secp256k1 curve is used in cryptocurrency. Can someone generate a private key with a different curve?

Many cryptocurrencies use Secp256k1. Every cryptocurrency library comes with its own redundant implementation of Secp256k1, ECDSA, RIPEMD160, and SHA256. So, there can be some inconsistencies across ...
18
votes
2answers
6k views

SHA-256: (Probabilistic?) partial preimage possible?

Currently busying myself with the Bitcoin "mining" algorithm, I am wondering if the process really cannot be simplified. For reference, the algorithm is basically SHA-256d: $$\mathit{success} := \...
4
votes
3answers
194 views

Why won't a BFT protocol using simple signing/voting work?

PBFT and most consensus algorithms are more complicated than a simple voting scheme. By simple voting I mean the following: we require all nodes to sign their local copy of the state and send this ...
0
votes
0answers
28 views

What is the cryptography involved in the initial setup of a cryptocurrency?

I keep hearing that when a cryptocurrency is created it goes through an initial setup phase wherein cryptographic parameters are created that are used by the cryptocurrency network throughout its ...
0
votes
0answers
52 views

Modifying Elliptic Curve Parameters

For context, I was watching this bit of the video: which goes over this source code. The piece is about elliptic curve cryptography and how it works. I want to use some of this knowledge to make my ...
0
votes
1answer
401 views

Half of any bitcoin (crypto) public key - (public key half) is possible

I found a topic on bitcointalk Public key x and y == Double(Half of the Public key x and y) half any public key is possible how that possible , in crypto there is subtraction and multiplication ...
3
votes
1answer
61 views

Time locked cryptography using Bitcoin difficulty param and/or smart contract?

Outcome: Create a message with a count down timer. Once a top level password is entered, a countdown timer starts. Once timer expires, the message is decrypted. Known methods: Proof of work. ...
0
votes
1answer
55 views

Is the following non-interactive zero-knowledge set membership protocol provable secure?

Given the following Zero-knowledge set-membership protocol https://infoscience.epfl.ch/record/128718/files/CCS08.pdf]. That is given in the following steps (Please refer to page 9). The Verifier -...
2
votes
2answers
69 views

Whats wrong with my El Gamal signature example

I'm trying to digitally sign a message m using El Gamal. So far I've been unable to verify the digital signature ive made using El Gamal. I am using prime number, p = 8369. prime root g = 3031. ...
1
vote
1answer
36 views

Monero Ring CT sj calculation

For a university project, I am currently implementing the RingCT Ring signatures as used in Monero (before the introduction of Bulletproofs) as laid out in this paper. To close the ring we calculate ...
5
votes
1answer
556 views

Is there a flaw in this ECC blind signature scheme?

Recently I've found the following work on the internet: An ECC-Based Blind Signature Scheme The paper claims to be an ECDSA blind signature however it seems that their scheme has a flaw in it. The ...
2
votes
1answer
225 views

Can you tell me why doing scalar multiplication of a point on a Elliptic curve over a finite field gets to a point at infinity?

I am reading Programming Bitcoin. The author said: Another property of scalar multiplication is that at a certain multiple, we get to the point at infinity (remember, the point at infinity is the ...
-1
votes
1answer
49 views

Is it possible for a hash in SHA-256 to have more than 8 digits? [closed]

Is it ever possible for a hash to have more than 8 digits in SHA-256?
0
votes
0answers
43 views

Problem with e-cash system with multiple banks

Say that many banks issue electronic cash of a particular type. If there is a malicious bank and user collusion, the malicious bank signs electronic cash for a particular user. This user then takes ...
0
votes
0answers
26 views

How to forge a Proof-of-Stake blockchain?

Suppose a node in a proof-of-stake blockchain network wants to forge a blockchain. I'm wondering what should this node do to forge it? Assume this node has a certain amount/fraction of money (but no ...
-1
votes
2answers
118 views

How to find at least one private key from a large list of compressed public keys secp256k1

Not long ago I saw a discussion on the Bitcoin Talk forum: https://bitcointalk.org/index.php?topic=5060735.msg50736695#msg50736695 Please give advice and working methods? Is it possible to find at ...
0
votes
1answer
71 views

Block chain and storage issues

On reading about block chain technology, it was observed that it leverages the distributed ledger technology through P2P, here integrity is ensured through hash computed by miners, and then is ...
0
votes
1answer
69 views

Question on using endomorphism on secp256k1 and negative results

I have read section 3.5 (algorithm 3.7) in "Guide to Elliptic Curve Cryptography", and have been trying to implement endomorphism on secpt256k1 to speed up calculating $kP$ by changing it into 2 point ...
1
vote
0answers
57 views

Why is ethereum not using threshold signatures like dfinity for randomness? What's the drawback?

So Ethereum goes for RANDAO. The disadvantage with RANDAO is that the last validator in the commit-reveal scheme is able to hold his contributed value back and thereby influence the random outcome. ...
0
votes
0answers
37 views

Explanation of Gallant-Lambert-Vanstone method / Endomorphism speedups [duplicate]

Can someone explain how the Gallant-Lambert-Vanstone method works (or which literature explains it)? It is also unclear to me how the Frobenius endomorphism can be used in some cases for a speedup. ...
7
votes
2answers
763 views

Does secp256k1 have any known weaknesses?

I am wondering whether there are any properties of the curve which would technically make it easier to attack than any other curves of 256 bits in size. I have heard that being a Koblitz curve, it ...
2
votes
1answer
364 views

Sane implementations of Bitcoin cryptography routines w.r.t. side-channel attacks

Bitcoin uses SHA-256, Base58Check, ECDSA (Sep256k1) and RIPEMD-160 as the basis of its encryption (see this article for a short guide on how addresses are created). I would like to create an iOS-...
3
votes
1answer
102 views

POW with Linear time to solve it?

Any suggestions for A Proof-of-Work algorithm in literature so that the time required for solving it is linear with the puzzle difficulty ??
0
votes
0answers
71 views

Concrete examples / tutorials of how blockchain/bitcoin works

I want to understand the crypto details behind the blockchain (at least in the form that bitcoin implements it). Can you point me to some page or documents that show the details with examples? I ...
0
votes
0answers
25 views

Time-locked deposit protocol?

I am designing a protocol where a user A sends a time-locked deposit to user that if the user B within time t provide a proof that he exists in a location x (this may be obtained by third party like ...
2
votes
3answers
153 views

Is that possible to prove that 'I do not know something' (i.e, the private key for a Bitcoin wallet) using cryptography?

Is that possible to prove that 'I do not know something' (i.e, the private key for a cryptocurrency wallet) using cryptography? The problem might be nonsense at first glance. But the intuition for ...
-1
votes
1answer
276 views

How does Diffie Hellman protocol work in Bitcoin Blockchain Transactions?

Greetings to all! Please explain how the Diffie-Hellman protocol works in Bitcoin? That is, in Blockchain Transactions, there is also a total number of "K" recipient and sender? "K" the recipient and ...
3
votes
1answer
173 views

Do I need to provide entropy to secp256k1_ecdsa_sign() ?

using secp256k1_ecdsa_sign() I noticed the same data signed multiple times, coming back with the same signature. I always thought that signatures are different because random data is somehow involved....
1
vote
1answer
129 views

Does the One-Time Hash-based Signature Scheme render Ring Signatures useless?

On the Bitcoin community, to maintain privacy, they recommend using one-time spend addresses. CryptoNote, Monero et al. prefer Ring Signatures to maintain that privacy. There are some issues regarding ...
1
vote
1answer
126 views

Revealing vote after time

Imagine we have 5 different parties, all of these parties test if a particular thing is true or false over the course of 24 hours. The network needs to come to a consensus about the majority outcome ...