Questions tagged [cryptocurrency]

A cryptocurrency is a digital currency powered by cryptography. This tag is applicable only to Q&As about the cryptographic mechanisms used by a currency, not for questions about economy, usage, or acquisition of any particular currency. Please note that Stackexchange has dedicated websites for Bitcoin, Ethereum, Monero, etc.

Filter by
Sorted by
Tagged with
1
vote
0answers
186 views

How are attributes encoded in private keys in Attribute-Based Encryption?

I understand how private keys are generated from public keys in a setup like Bitcoin (using ECDSA). I understand that anyone can verify they have the 'correct' private key using a digital signature ...
1
vote
0answers
82 views

Digital cash and blind signiture: coherence between signature and serial number

My question is about the basics of the topic "creating digital cash". At the very beginning of that topic the amount of the banknote and a serial number are the requirements for generating a ...
1
vote
1answer
165 views

Large Volumes of Asymmetric Encryption

First of all, I apologize in advance if I use any incorrect terminology. I am just getting my feet wet when it comes to cryptography and there is a lot to learn. For the past 12 months, we have been ...
1
vote
0answers
97 views

Can a LIRA system work with cjdns or other decentralized meshnets?

LIRA (Lightweight Incentivized Routing for Anonymity) is a scheme to incentivize participants in Tor to contribute resources, in particular bandwidth. The paper talks about it being used for Tor. Can ...
0
votes
4answers
1k views

Optimized modular multiplicative inverse for Bitcoin (secp256k1)

I have written an application to brute-force attack Bitcoin addresses for OpenCL. It implements a simple exhaustive search starting from public key G (private key 1) and point increment (addition of G)...
0
votes
2answers
185 views

Why can't you hijack someone's public key

Sorry, this might be a stupid question but the more questions are here the easier you can use the Internet. To sign your message in Bitcoin network, Alice uses his private key and message content. Bob ...
0
votes
2answers
288 views

Where can I learn basic cryptography to know more about passwords and Bitcoin?

Basically my knowledge in passwords consist of setting up a Diceware master password back then, and I know hashes are not convertible back to the original password. Some basic question I want to know ...
0
votes
2answers
205 views

Bitcoin Private Key Question

If Bitcoin can be forked, and the same address can exist on both blockchains, what stops the re-generation of a privatekey on one blockchain that would also work on the other? For that matter, what ...
0
votes
1answer
485 views

Half of any bitcoin (crypto) public key - (public key half) is possible

I found a topic on bitcointalk Public key x and y == Double(Half of the Public key x and y) half any public key is possible how that possible , in crypto there is subtraction and multiplication ...
0
votes
1answer
488 views

ECC private key generation collision

I am generating ECC private keys. however I noticed that since ECC private key is just a BigInteger. e.g. spec256k1 says private key is anywhere between [0~2^256-1]....
0
votes
1answer
72 views

Block chain and storage issues

On reading about block chain technology, it was observed that it leverages the distributed ledger technology through P2P, here integrity is ensured through hash computed by miners, and then is ...
0
votes
2answers
129 views

The use of Elliptic Curves as part of a blockchain transaction

As I understand it, Elliptic-Curve Cryptography is used in the verification step of a transaction (i.e. when creating a digital signature), but not in the creation and security of a 'block' (when ...
0
votes
2answers
946 views

Probability last character sha256 hash

A quick question. I want to use the last character of a SHA256 hash (blockhash of a bitcoin block) as my random source. Is 100 /16(amount of different chars) = 6.25% true for all characters or are ...
0
votes
1answer
91 views

Bitcoin mining nonce and birthday attack

Having read the basics of mining and this about SHA256 (probabilistic?) partial preimage possible? and SAT solving - An alternative to brute force bitcoin mining, I have the following question: ...
0
votes
1answer
226 views

The Secp256k1 curve is used in cryptocurrency. Can someone generate a private key with a different curve?

Many cryptocurrencies use Secp256k1. Every cryptocurrency library comes with its own redundant implementation of Secp256k1, ECDSA, RIPEMD160, and SHA256. So, there can be some inconsistencies across ...
0
votes
1answer
123 views

How might one create a system of election by lot (sortition) that is both secure and verifiable?

I've been puzzling recently over sortition, a democratic method of selection for public office which I find very fascinating. Basically, instead of choosing candidates like Hillary Clinton or Donald ...
0
votes
1answer
107 views

Does an anonymous signature hide the sender's identity from the receiver?

Does an anonymous signature hide the sender's identity from the receiver, or simply just hide the sender's identity from an eavesdropper or third party?
0
votes
1answer
77 views

A method to receive payments at obscured addresses [closed]

The background: We assume that coin ownership and payments are recorded on a public ledger. Suppose Alice wants to publish some information to let her receive coins from anyone. But she does not want ...
0
votes
1answer
270 views

Signature Aggregation / Multi-Signature

I want to save the space signatures take up in a block of Bitcoin transactions. To simplify it, here is the general transaction structure in a block: message public key signature of the message ...
0
votes
1answer
343 views

Is my AES-128-CTR implementation secure enough to encrypt private keys and mnemonic seed? [closed]

I am building a cryptocurrency wallet online where everything is stored in the browser (No servers). At this moment I am storing all private keys encrypted using AES-128-CTR I've chosen this method ...
0
votes
1answer
74 views

Can we retrieve his private key using his public key in ECC?

A paper wallet is the name given to an obsolete and unsafe method of storing bitcoin which was popular between 2011 and 2016. It works by having a single private key and bitcoin address, being printed ...
0
votes
2answers
103 views

How does this formula work $(aG + bG) = (a + b) G$ in ECDSA?

Please explain how does this formula $(aG + bG) = (a + b) G$ work in ECDSA? According to the source: $a$ and $b$ are different private keys Suppose $a = 3$ $b = 4$ then the public key is $Q = aG$...
0
votes
1answer
59 views

Is the following non-interactive zero-knowledge set membership protocol provable secure?

Given the following Zero-knowledge set-membership protocol https://infoscience.epfl.ch/record/128718/files/CCS08.pdf]. That is given in the following steps (Please refer to page 9). The Verifier -...
0
votes
2answers
425 views

19 out of 24 words of BIP39 passphrase (brute-force last 5?)

I have managed to lose 5 words of my 24 word Ledger Nano S recovery phrase. I have words 1-19 but I am missing words 20-24. I have significant holdings on the wallet so would very much like to recover ...
0
votes
1answer
42 views

Economically Rational as a security proof

Is it possible to prove the security of a cryptocurrency payment protocol by saying that the actors will seek to maximize their profits. Would I need to set this up as a game and prove it that way or ...
0
votes
1answer
55 views

Paper wallet QR codes

What is the purpose for and distinction between each of the following keys commonly used in cryptocurrencies? Address Tracking key Passphrase Private key For context: I got a bytecoin paper wallet ...
0
votes
1answer
147 views

Why is Tor alone not enough to guarantee anonymity for Bitcoin?

Why is Tor alone not enough to guarantee anonymity for Bitcoin? Why do we need the constructions like Zerocoin?
0
votes
0answers
22 views

Which application software can be used to simulate the Proof-of-work algorithm of a single node?

Which application software can be used to simulate the Proof-of-work algorithm of a single node, with parameters such as changing the size of the Nonce and inputting customised block created ...
0
votes
1answer
78 views

would parallel crypto mining work

Hi everyone I was wondering would it be possible to mine a cryptocurrency like bitcoin in parallel. I have read a little about mining pools https://en.wikipedia.org/wiki/Mining_pool , But that's not ...
0
votes
0answers
56 views

Modifying Elliptic Curve Parameters

For context, I was watching this bit of the video: which goes over this source code. The piece is about elliptic curve cryptography and how it works. I want to use some of this knowledge to make my ...
0
votes
0answers
28 views

What is the cryptography involved in the initial setup of a cryptocurrency?

I keep hearing that when a cryptocurrency is created it goes through an initial setup phase wherein cryptographic parameters are created that are used by the cryptocurrency network throughout its ...
0
votes
0answers
43 views

Problem with e-cash system with multiple banks

Say that many banks issue electronic cash of a particular type. If there is a malicious bank and user collusion, the malicious bank signs electronic cash for a particular user. This user then takes ...
0
votes
0answers
28 views

How to forge a Proof-of-Stake blockchain?

Suppose a node in a proof-of-stake blockchain network wants to forge a blockchain. I'm wondering what should this node do to forge it? Assume this node has a certain amount/fraction of money (but no ...
0
votes
1answer
95 views

Question on using endomorphism on secp256k1 and negative results

I have read section 3.5 (algorithm 3.7) in "Guide to Elliptic Curve Cryptography", and have been trying to implement endomorphism on secpt256k1 to speed up calculating $kP$ by changing it into 2 point ...
0
votes
0answers
41 views

Explanation of Gallant-Lambert-Vanstone method / Endomorphism speedups [duplicate]

Can someone explain how the Gallant-Lambert-Vanstone method works (or which literature explains it)? It is also unclear to me how the Frobenius endomorphism can be used in some cases for a speedup. ...
0
votes
0answers
77 views

Concrete examples / tutorials of how blockchain/bitcoin works

I want to understand the crypto details behind the blockchain (at least in the form that bitcoin implements it). Can you point me to some page or documents that show the details with examples? I ...
0
votes
0answers
28 views

Time-locked deposit protocol?

I am designing a protocol where a user A sends a time-locked deposit to user that if the user B within time t provide a proof that he exists in a location x (this may be obtained by third party like ...
0
votes
1answer
74 views

Do I need to use HMAC in this crypto wallet backup application?

I'm building an application for securely backing up cryptocurrency private keys or 12-word backup phrases that crypto wallets use as a seed to generate private keys. For the purpose of this question, ...
-1
votes
2answers
149 views

How to find at least one private key from a large list of compressed public keys secp256k1

Not long ago I saw a discussion on the Bitcoin Talk forum: https://bitcointalk.org/index.php?topic=5060735.msg50736695#msg50736695 Please give advice and working methods? Is it possible to find at ...
-1
votes
1answer
345 views

How does Diffie Hellman protocol work in Bitcoin Blockchain Transactions?

Greetings to all! Please explain how the Diffie-Hellman protocol works in Bitcoin? That is, in Blockchain Transactions, there is also a total number of "K" recipient and sender? "K" the recipient and ...
-1
votes
1answer
119 views

How do I convert KECCAK-256 to FLOPS? (Ethereum)

I wanted to know how much one Ethereum KECCAK-256(hash) is in FLOPS. I know bitcoin is 12,697 flops per hash.
-1
votes
1answer
115 views

Double hash question [closed]

I would like a valid Bitcoin address (derived from a private key created by rolling a pair of hexadecimal dice 32 times) to be the private key of any private / public cryptography. So if I encrypt a ...
-1
votes
1answer
59 views

Is it possible for a hash in SHA-256 to have more than 8 digits? [closed]

Is it ever possible for a hash to have more than 8 digits in SHA-256?
-1
votes
1answer
140 views

Signing operation with public key in bitcoin protocol (video lecture)

At 5:26 in this princeton coursera course video the presenter says that the public key is used (by the recipient) to generate the signature to redeem the coins. I'm a little confused here. If the ...
-2
votes
1answer
124 views

are all elements of ZpxZp in ECC definite over Zp

are all elements of ZpxZp in ECC (elliptic curve) definite over Zp ? otherwise: assume G a base point of ECC and n the order of G. why n is equal or nother to p*p ? (p a prime number). (Think to a ...
-5
votes
1answer
169 views

Someone discover two pair privkey for one address

I have a question about bitcoin privkey: If you have TWO pair privkey(compressed and uncompressed) I wrote again TWO pair, yes i know, many person say - it is not possible, but... And this works ...