Questions tagged [cryptocurrency]

A cryptocurrency is a digital currency powered by cryptography. This tag is applicable only to Q&As about the **cryptographic mechanisms** used by a currency, not for questions about economy, usage, or acquisition of any particular currency. The latter kinds are unwelcome. Please note that Stackexchange has dedicated websites for Bitcoin, Ethereum, Monero, etc.

46 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
1 answer
289 views

Could the multisignature scheme in bitcoin alternatively also be implemented by means of a Shamir Secret Sharing Scheme?

When I first came across the Bitcoin multisignature scheme, I wondered that it remarkably looked similar to what Shamir Secret Sharing does (SSS), but then by using facilities in the bitcoin scripting ...
  • 111
3 votes
0 answers
129 views

Can you elaborate on pBFT for dBFT in relation to PoW and PoS consensus algorithms in layman's terms?

I've read all other related answers and googled this extensively. My intention and background in asking this question is that I am delving into cryptocurrency and blockchain technology in general. ...
  • 31
2 votes
0 answers
33 views

What is the difference between Solution-Verification and Challenge-Response variants of Proof of Work;

Sorry if question is really dumb, I am new to crypto :( If the client provides the solution for the PoW Challenge-Response, in my understanding, the solution of that challenge should be verified. So I ...
2 votes
0 answers
56 views

Difference between fuzzy vault and fuzzy commitment?

https://dl.acm.org/doi/10.1145/2905055.2905118 Quoting the above paper's abstract, "Biometric cryptosystem can apply fuzzy vault, fuzzy commitment, helper data and secure sketch, whereas, ...
2 votes
0 answers
66 views

How to associate a post-quantum public key with a pre-quantum one in blockchains?

As a layperson, I'm curious if a cryptocurrency could fork to a quantum-resistant algorithm without people losing access to their wallets. Is it possible to generate a quantum-resistant public key ...
2 votes
0 answers
97 views

How hard is it to link a hardened BIP32 child public key to it's parent public key?

The BIP32 spec says this in the security section: ...
2 votes
0 answers
178 views

ZK Proof that a blinded message (for a blind signature) contains a certain value

I am toying with eCash systems and blind signatures, and I started with Chaum's original formulation. In particular, I'm using this formulation from this link: User ...
2 votes
0 answers
80 views

Ecash - Probability of catching a user using secret splitting who duplicates the coin

For detecting double spending, secret splitting is used. If a user duplicates the coin, then there will be two different transaction items in transaction list. What is the probability of catching a ...
  • 29
1 vote
0 answers
132 views

Assuming secp256k1 curve and given fixed (but random) $h$ and $d$ values, is it possible to calculate a $k$ such that $h\equiv(k\,G)_X\,(k-d)\pmod n$?

For generator point $G$ in the secp256k1 curve, I want to find a value $k$ such that: $$h\equiv(k\,G)_X\,(k-d)\pmod n$$ where $n$ is the group order, and $(k\,G)_X$ indicates the x-coordinate (mod n) ...
1 vote
0 answers
36 views

Is a truly p2p ledger (cryptocurrency) possible?

Is a truly p2p ledger possible, where there is no need for a third party (or a number of third parties) to verify ledgers. Probably a system where the two parties who don't trust each other can verify ...
  • 13
1 vote
0 answers
40 views

Is it possible to provably make cryptocurrency tokens inaccessible?

Would it be possible to generate an agreed upon public key that has no corresponding private key (maybe by using the latest few block hashes of a blockchain) and then send cryptocurrency to that ...
1 vote
0 answers
265 views

Why wouldn't you just refer to the hash of the jpg file in the NFT storage?

This question is in reference to this tweet. It seems people are using the url of third party websites to record the reference to the content for NFTs. Why can't people just hash the jpg files for ...
  • 113
1 vote
0 answers
163 views

How Secure Is Splitting A Bitcoin Private Key?

NOTE: This question cannot be posted to Bitcoin SE because it will not render there due to the mathematical notation. Since the mathematical notation is part of the question, this is the more ...
1 vote
0 answers
53 views

Hash as encryption used by Monero

Monero uses a Pedersen commitment $yG + bH$ to obfuscate the value of a transaction, where $b$ is the value and $y$ is the blinding factor. For the receiver to know both variables, it uses a Diffie-...
  • 515
1 vote
0 answers
28 views

Map many crytocurrency token IDs (2^512) into a single set of tokens IDs (2^256)

Let we have a finite (small compared to 2256) set $T$ of 257-bit numbers. Need a function $f: T \to 2^{256}$ such that it's almost of zero probability that $f(n)=f(m)$ for two different numbers $n,m\...
  • 111
1 vote
0 answers
82 views

Probability of finding a valid block when cryptocurrency mining

Today I learned that for BTC, the probability of a hash being valid is approximately 1/(D*2^32), whereas D denotes to the difficulty. I was wondering if this is ...
1 vote
0 answers
55 views

Cryptography that lets you conceal a secret, but also alerts others of the exposure of the concealed secret?

Is there such a cryptography where I can prove that someone decrypted an encrypted string? Say I wanted to attach a Bitcoin private key in some type of digital container, but in order to open this ...
1 vote
0 answers
28 views

What guarantees that a mined block will be accepted on the network? (Blockchain)

What ensures that a mined block will be accepted on the network? I mean, if I mine a valid block in the blockchain, and I transmit it to the network, what is the incentive to people accept it? Doesn't ...
  • 111
1 vote
0 answers
37 views

Size of messages in timing attack on RSA Montgomery

I'm codin' timing attack on RSA Montgomery which compares two sets ( the first one includes those which need a reduction in contrary to the second one ). But I got troubles with the Montgomery ...
1 vote
0 answers
241 views

Proof of membership on a merkle tree

I read the zcash paper recently. But I have been puzzled by a question. How did the authors prove that the coin commitment appears as a leaf of a Merkle tree with root rt? Apparently, the authors ...
  • 41
1 vote
0 answers
23 views

Can the precompiles in Ethereum Byzantium for pairings be used for implementation of BBS group signature verification?

I'm currently implementing a group signature verification on Ethereum and it seems that the Pairing check can only return a boolean. According to the BBS algorithm, to validate a signature $s$, you ...
  • 11
1 vote
0 answers
61 views

Can I use a blockchain to lock access to some information before a certain amount of time has passed, without relying on third-parties?

Picture the following (the example is very similar to the real scenario): I have a physical item in possession in which I want to lock myself (don't ask [1]) from accessing it until a ...
  • 111
1 vote
0 answers
111 views

Reconciling Multiple Blockchains?

I'm playing around with the idea of a blockchain where both the proof-of-work and verification steps are NP-hard. It seems the NP-hard verification step can be resolved if you allow for multiple ...
  • 531
1 vote
0 answers
299 views

Can Bitcoin mining solve Graph Isomorphism-related problems?

Given a cryptographic hash $H:\{0,1\}^*\mapsto\{0,1\}^N$ and data $D\in\{0,1\}^*$, the Hashcash/Bitcoin Proof-of-Work entails finding a nonce $x$ such that $H(x\Vert D)$ begins with $d$ leading zeros, ...
  • 133
1 vote
0 answers
215 views

How are attributes encoded in private keys in Attribute-Based Encryption?

I understand how private keys are generated from public keys in a setup like Bitcoin (using ECDSA). I understand that anyone can verify they have the 'correct' private key using a digital signature ...
1 vote
0 answers
88 views

Digital cash and blind signiture: coherence between signature and serial number

My question is about the basics of the topic "creating digital cash". At the very beginning of that topic the amount of the banknote and a serial number are the requirements for generating a ...
1 vote
0 answers
99 views

Can a LIRA system work with cjdns or other decentralized meshnets?

LIRA (Lightweight Incentivized Routing for Anonymity) is a scheme to incentivize participants in Tor to contribute resources, in particular bandwidth. The paper talks about it being used for Tor. Can ...
0 votes
0 answers
16 views

How to ensure the security of computation and transmition on Smart Contracts?

Suppose there is a smart contract with a bidding function, and the bidder can send the bid price to the smart contract after encrypting it. When the auction is over, a trusted third party sends the ...
  • 186
0 votes
0 answers
44 views

What is the general equation for determining the viability of a brute force attack on BIP-39? (Only performing access with pre-image - 12 seed words)

I'd like to be able to better define the security of a BIP-39 algorithm where I just consider the process of giving me a "seed phrase". Imagining a scenario where a hacker would try to gain ...
0 votes
0 answers
60 views

The simulation sound extractable NIZK

I was recently reading the paper Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts. To prove the security, the authors assume that the NIZK used in the protocol is ...
0 votes
0 answers
41 views

Summarized steps for zero knowledge proof on a public blockchain transaction

Im triying to understand Zero knowledge proof and its applications, my first instict is a blockchain (I will use Bitcoin-like for simplicity sake) Im triying to wrap my head around it by describing ...
0 votes
0 answers
84 views

How to get public key and bitcoin compressed address from the coordinates (x,y) generated by ECDSA?

I have my x (0xca668a8b5f71e8724aada4b5343c28702a481787855cc42228b8fff97fe94d6a) and y (0x19dd3a603a55b3d8c5f62cbe177b9b63693fb8c91d76845bafc843a7aa19ea55) coordinates generated by ecdsa with a ...
  • 1
0 votes
0 answers
42 views

How does not tagging hashes result in leaking the secret key if a nonce is re-used in a different scheme?

I'm reading through BIP340 and I'm having trouble understanding this part: For example, without tagged hashing a BIP340 signature could also be valid for a signature scheme where the only difference ...
0 votes
0 answers
42 views

Does the number of bits in the block nonce influence the security of the blockchain?

I know that Bitcoin uses a 32bit nonce that miners iterate over trying to hit the target number of prefixed 0's in the hash. If they run through all 2^32 combinations they then change something else ...
0 votes
0 answers
591 views

Let user(s) chose to mint a specific NFT from a solana collection

I have a collection of images to transform in NFTs. For that purpose I have selected to work with solana blockchain, since it is fast and cheap. I have used the following software resources: solana-...
0 votes
0 answers
127 views

Are there batched vector/polynomial commitment proofs with sublinear proof size for Verkle Trees?

High level goal: a Verkle tree (Merkle tree using algebraic vector commitments at each level rather than hashes) with depth d where I can prove the existence of <...
0 votes
0 answers
700 views

How to retrieve BIP39 seed phrase: 3 words missing of 24

I lost 3 middle words of my 24 words seed phrase for a nano ledger hardware wallet. As an example (not my real seed phrase) ...
0 votes
0 answers
541 views

Bitcoin Key Recovery Without Nonce Re-Use

There are a lot of questions in these forums regarding the recovery of private keys. But I'm here to postulate on something unique to a specific piece of research that I looked into recently. The ...
  • 115
0 votes
0 answers
44 views

Suggestion on dynamically changing hash algorithms for blockchain

First of all excuse me for my inexperience on the topic (I am new to cryptography). I am currently studying for my Master thesis and am am looking for hash function on which I can modify them so thy ...
  • 9
0 votes
0 answers
63 views

Bitcoin ECDSA signature

I am trying to use the ecdsaSign function in ecdsa.c of https://github.com/kvhnuke/Ethereum-Arduino/tree/master/Ethereum-Arduino/libs which is based on the files in the repo https://github.com/...
0 votes
0 answers
506 views

How do you verify that an address is related to a private key

This is my first post. My interest for cryptography is exclusively motivated by cryptocurrencies. My question is: If I generate some keys, how do I actually verify that the address is indeed ...
  • 1
0 votes
0 answers
136 views

Modifying Elliptic Curve Parameters

For context, I was watching this bit of the video: which goes over this source code. The piece is about elliptic curve cryptography and how it works. I want to use some of this knowledge to make my ...
  • 163
0 votes
0 answers
53 views

Problem with e-cash system with multiple banks

Say that many banks issue electronic cash of a particular type. If there is a malicious bank and user collusion, the malicious bank signs electronic cash for a particular user. This user then takes ...
0 votes
0 answers
121 views

Concrete examples / tutorials of how blockchain/bitcoin works

I want to understand the crypto details behind the blockchain (at least in the form that bitcoin implements it). Can you point me to some page or documents that show the details with examples? I ...
  • 121
0 votes
0 answers
39 views

Time-locked deposit protocol?

I am designing a protocol where a user A sends a time-locked deposit to user that if the user B within time t provide a proof that he exists in a location x (this may be obtained by third party like ...
-1 votes
1 answer
129 views

How to pad in the SHA256 Algorithm (an example using Bitcoin Header)?

For any bitcoin block we combine various Header fields to create a string which is an input to a 2 pass SHA algorithm. The resultant hash must match with the Hash in the Block header for the Block to ...
  • 141