Questions tagged [cryptocurrency]

A cryptocurrency is a digital currency powered by cryptography. This tag is applicable only to Q&As about the cryptographic mechanisms used by a currency, not for questions about economy, usage, or acquisition of any particular currency. Please note that Stackexchange has dedicated websites for Bitcoin, Ethereum, Monero, etc.

38 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
254 views

Could the multisignature scheme in bitcoin alternatively also be implemented by means of a Shamir Secret Sharing Scheme?

When I first came across the Bitcoin multisignature scheme, I wondered that it remarkably looked similar to what Shamir Secret Sharing does (SSS), but then by using facilities in the bitcoin scripting ...
2
votes
1answer
65 views

What is the maths behind Bitcoin's BIP32?

I've read about BIP32 key derivation functions. I'm trying to understand how, given a secp256k1 key pair, that "child" public keys may be generated from just the public key, and the ...
2
votes
0answers
77 views

How hard is it to link a hardened BIP32 child public key to it's parent public key?

The BIP32 spec says this in the security section: ...
2
votes
0answers
91 views

ZK Proof that a blinded message (for a blind signature) contains a certain value

I am toying with eCash systems and blind signatures, and I started with Chaum's original formulation. In particular, I'm using this formulation from this link: User ...
2
votes
0answers
64 views

Post-quantum aggregate / multi signatures

Are there any practical post-quantum aggregate / multi signatures? Currently, the aggregate / multi signature schemes seem to be limited to pre-quantum elliptic curve assumptions only, e.g., [BDN18], [...
2
votes
0answers
75 views

Ecash - Probability of catching a user using secret splitting who duplicates the coin

For detecting double spending, secret splitting is used. If a user duplicates the coin, then there will be two different transaction items in transaction list. What is the probability of catching a ...
1
vote
1answer
21 views

Attestation of private key deletion

I recently came across an article outlining a framework for a hypothetical cryptocurrency, the article is here if you care to read the whole thing. The relevant section is the "Digital Cash" ...
1
vote
0answers
31 views

Hash as encryption used by Monero

Monero uses a Pedersen commitment $yG + bH$ to obfuscate the value of a transaction, where $b$ is the value and $y$ is the blinding factor. For the receiver to know both variables, it uses a Diffie-...
1
vote
0answers
24 views

Map many crytocurrency token IDs (2^512) into a single set of tokens IDs (2^256)

Let we have a finite (small compared to 2256) set $T$ of 257-bit numbers. Need a function $f: T \to 2^{256}$ such that it's almost of zero probability that $f(n)=f(m)$ for two different numbers $n,m\...
1
vote
0answers
51 views

Cryptography that lets you conceal a secret, but also alerts others of the exposure of the concealed secret?

Is there such a cryptography where I can prove that someone decrypted an encrypted string? Say I wanted to attach a Bitcoin private key in some type of digital container, but in order to open this ...
1
vote
0answers
24 views

What guarantees that a mined block will be accepted on the network? (Blockchain)

What ensures that a mined block will be accepted on the network? I mean, if I mine a valid block in the blockchain, and I transmit it to the network, what is the incentive to people accept it? Doesn't ...
1
vote
0answers
23 views

Size of messages in timing attack on RSA Montgomery

I'm codin' timing attack on RSA Montgomery which compares two sets ( the first one includes those which need a reduction in contrary to the second one ). But I got troubles with the Montgomery ...
1
vote
0answers
63 views

Is the proof-of-work algorithm “Quark” insecure?

I recently found out about Quark here: https://en.bitcoinwiki.org/wiki/Quark_Algorithm Apparently it is a proof-of-work algorithm used by several cryptocurrencies and is based on a single-level hash ...
1
vote
0answers
127 views

Proof of membership on a merkle tree

I read the zcash paper recently. But I have been puzzled by a question. How did the authors prove that the coin commitment appears as a leaf of a Merkle tree with root rt? Apparently, the authors ...
1
vote
1answer
139 views

Why is ethereum not using threshold signatures like dfinity for randomness? What's the drawback?

So Ethereum goes for RANDAO. The disadvantage with RANDAO is that the last validator in the commit-reveal scheme is able to hold his contributed value back and thereby influence the random outcome. ...
1
vote
0answers
22 views

Can the precompiles in Ethereum Byzantium for pairings be used for implementation of BBS group signature verification?

I'm currently implementing a group signature verification on Ethereum and it seems that the Pairing check can only return a boolean. According to the BBS algorithm, to validate a signature $s$, you ...
1
vote
0answers
54 views

Can I use a blockchain to lock access to some information before a certain amount of time has passed, without relying on third-parties?

Picture the following (the example is very similar to the real scenario): I have a physical item in possession in which I want to lock myself (don't ask [1]) from accessing it until a ...
1
vote
0answers
109 views

Reconciling Multiple Blockchains?

I'm playing around with the idea of a blockchain where both the proof-of-work and verification steps are NP-hard. It seems the NP-hard verification step can be resolved if you allow for multiple ...
1
vote
0answers
269 views

Can Bitcoin mining solve Graph Isomorphism-related problems?

Given a cryptographic hash $H:\{0,1\}^*\mapsto\{0,1\}^N$ and data $D\in\{0,1\}^*$, the Hashcash/Bitcoin Proof-of-Work entails finding a nonce $x$ such that $H(x\Vert D)$ begins with $d$ leading zeros, ...
1
vote
0answers
207 views

How are attributes encoded in private keys in Attribute-Based Encryption?

I understand how private keys are generated from public keys in a setup like Bitcoin (using ECDSA). I understand that anyone can verify they have the 'correct' private key using a digital signature ...
1
vote
0answers
86 views

Digital cash and blind signiture: coherence between signature and serial number

My question is about the basics of the topic "creating digital cash". At the very beginning of that topic the amount of the banknote and a serial number are the requirements for generating a ...
1
vote
0answers
98 views

Can a LIRA system work with cjdns or other decentralized meshnets?

LIRA (Lightweight Incentivized Routing for Anonymity) is a scheme to incentivize participants in Tor to contribute resources, in particular bandwidth. The paper talks about it being used for Tor. Can ...
0
votes
3answers
82 views

Would It Be Technically Possible To Delete Old Blocks From A Blockchain Cryptocurrency?

From what I understand, a cryptocurrency mine needs to store a copy of the entire blockchain in order to be able verify transactions, which is why most wallet owners are not miners. The more ...
0
votes
0answers
26 views

Is there any application for ZKP that prove that “I know the pre-image of Hash function”

I'm looking for any applications that using ZKP to prove that "I know the pre-image for Hash function". As far as I know, POUR operation in Zcash uses this concept but I can't find any ...
0
votes
0answers
15 views

On sub-linear ring signatures and transaction sizes

I've been reading Noether's paper on Triptych and its extension Arcturus, alongside a few others exploring sub-linear ring signature schemes. I only have one question. Each paper (RingCT3.0 and its ...
0
votes
0answers
18 views

Cryptocurrencies: Undetectable Nothing-at-Stake - why does it matter?

The paper Formal Barriers to Longest-Chain Proof-of-Stake Protocols (Brown-Cohen, Narayanan, Psomas, Weinberg, 2018) describes an attack on Proof-of-Stake cryptocurrencies called Undetectable Nothing-...
0
votes
0answers
19 views

R, S, and Z values in a transaction using the Transaction ID

How can i get the R, S, and Z values and the Public Key using a transaction IDE i have? I knew of a website called 2coin.org which provided these values but now the website is no more active and it ...
0
votes
0answers
19 views

Universal Computation “measurement” using SNARKs?

If SNARKs are able to prove computations of arbitrary complexity and difficulty were executed correctly, would it be possible to use them to create a Proof of Work consensus system where ANY ...
0
votes
0answers
23 views

Probability of finding a valid block when cryptocurrency mining

Today I learned that for BTC, the probability of a hash being valid is approximately 1/(D*2^32), whereas D denotes to the difficulty. I was wondering if this is ...
0
votes
0answers
35 views

Suggestion on dynamically changing hash algorithms for blockchain

First of all excuse me for my inexperience on the topic (I am new to cryptography). I am currently studying for my Master thesis and am am looking for hash function on which I can modify them so thy ...
0
votes
0answers
40 views

Bitcoin ECDSA signature

I am trying to use the ecdsaSign function in ecdsa.c of https://github.com/kvhnuke/Ethereum-Arduino/tree/master/Ethereum-Arduino/libs which is based on the files in the repo https://github.com/...
0
votes
0answers
155 views

How do you verify that an address is related to a private key

This is my first post. My interest for cryptography is exclusively motivated by cryptocurrencies. My question is: If I generate some keys, how do I actually verify that the address is indeed ...
0
votes
0answers
159 views

Comparisons of ECDSA, EdDSA and BLS Signatures in Blockchain: Pros and Cons

As we know, the most used digital scheme in Blockchain is ECDSA. For now, more and more blockchain projects, I've noticed, are considering substituting EdDSA and BLS signature scheme as the new one. ...
0
votes
0answers
94 views

Modifying Elliptic Curve Parameters

For context, I was watching this bit of the video: which goes over this source code. The piece is about elliptic curve cryptography and how it works. I want to use some of this knowledge to make my ...
0
votes
1answer
107 views

Is the following non-interactive zero-knowledge set membership protocol provable secure?

Given the following Zero-knowledge set-membership protocol https://infoscience.epfl.ch/record/128718/files/CCS08.pdf]. That is given in the following steps (Please refer to page 9). The Verifier -...
0
votes
0answers
47 views

Problem with e-cash system with multiple banks

Say that many banks issue electronic cash of a particular type. If there is a malicious bank and user collusion, the malicious bank signs electronic cash for a particular user. This user then takes ...
0
votes
0answers
100 views

Concrete examples / tutorials of how blockchain/bitcoin works

I want to understand the crypto details behind the blockchain (at least in the form that bitcoin implements it). Can you point me to some page or documents that show the details with examples? I ...
0
votes
0answers
34 views

Time-locked deposit protocol?

I am designing a protocol where a user A sends a time-locked deposit to user that if the user B within time t provide a proof that he exists in a location x (this may be obtained by third party like ...