All Questions
Tagged with ethereum or cryptocurrency
291 questions
0
votes
0
answers
9
views
How to identify a private key is odd or even from the (x,y) coordinate of the key? [duplicate]
Suppose k is a private key.
Now using elliptic curve cryptography and scaler multiplication point point P(x,y) has been calculated from the private key k
Now if I give someone point P(x,y). Will he/...
0
votes
0
answers
28
views
Is it possible to convert public key to private key if anybody can decode doubling to singling?
If a point is P then,
P => Doubling operation => 2P
If anybody can reverse it, i,e
2P => Reverse Doubling => P
Will he/she be able to calculate private key from the specific public key of ...
- 125
-3
votes
0
answers
35
views
I was scammed in crypto [closed]
I was approached by individuals offering an investment opportunity in cryptocurrency. After some back and forth, I was persuaded to send funds (Ethereum in this case) to a wallet address they provided....
- 1
2
votes
1
answer
120
views
Efficient NOT in set proof?
I am looking for a solution for a very specific problem, I have one, but I am not statisfied with it and it feels there must be a much more efficient way to do this.
I have a hashed value of 256 bits. ...
CommunityBot
- 1
0
votes
0
answers
4
views
Error While Running sugar upload in NEW SOLANA token creation [migrated]
While running sugar upload command from my cli, I see below error-
...
- 146k
1
vote
1
answer
51
views
Does FROST threshold signing go well with BIP340?
FROST is a popular threshold signing protocol for Schnorr-style signatures.
BIP340 is a specification for an instantiation of a Schnorr-style signature scheme for Bitcoin Taproot. Specifically, they ...
- 697
6
votes
3
answers
1k
views
How are objects sold as NFT's ("non-fungible tokens")?
I'm familiar with "blockchain" and the theory and technology behind cryptocurrencies, tokens, and the economics behind why such things are capable of having monetary value, however I've ...
- 15.7k
3
votes
1
answer
250
views
Creating a private cryptocurrency without trusted setup
I am interested in creating a cryptocurrency that keeps the sender, the receiver and the amount private and does not require a trusted setup.
I have already read the Zerocash protocol but It uses zk-...
CommunityBot
- 1
0
votes
1
answer
44
views
How to determine large point for the same x axis in the elliptic curve cryptography?
For a given X value of elliptic curve cryptography there are two Y values. One point is P(x,y) and another point is Q(x1,y1) where P =-Q or Q = -P. Suppose given X value is ...
- 151k
0
votes
1
answer
70
views
Can parties in an MPC protocol establish a shared secret with an external party?
Creating a shared secret(ECDH) with a single private key is easy:
a·B = b·A
Does the same apply to MPC? and if so how?
Based on Gennaro and Goldfeder CCS 2018
1
vote
2
answers
344
views
Zencash uses your passphrase to identify AND unlock a wallet - how is this secure?
When looking into Zencash I stumbled into myzenwallet.io (by the Zencash creators), which gives you the option to enter a passphrase to generate a wallet (seems normal), but then after creating your ...
2
votes
1
answer
209
views
How does hardware wallet recovery work?
I'm investigating hardware cryptocurrency wallets and am trying to understand how recovery works from a technical point of view. These wallets typically provide a 24-word "recovery seed" ...
CommunityBot
- 1
0
votes
0
answers
59
views
Why hashing when generating account from public key?
When producing an account out of public key it's a common approach to hash the latter multiple times (sometimes using different algos) before encoding and taking a portion of the product. Is this done ...
- 94.5k
2
votes
2
answers
641
views
How Secure Is Splitting A Bitcoin Private Key?
NOTE: This question cannot be posted to Bitcoin SE because it will not render there due to the mathematical notation. Since the mathematical notation is part of the question, this is the more ...
4
votes
3
answers
2k
views
What's the difference between a hash chain, transaction chain and a blockchain?
Can anyone explain to me what the difference is between a hash chain, transaction chain and a blockchain?
2
votes
1
answer
184
views
0
votes
0
answers
1k
views
Bitcoin Key Recovery Without Nonce Re-Use
There are a lot of questions in these forums regarding the recovery of private keys.
But I'm here to postulate on something unique to a specific piece of research that I looked into recently.
The ...
CommunityBot
- 1
-2
votes
2
answers
1k
views
How to find at least one private key from a large list of compressed public keys secp256k1
Not long ago I saw a discussion on the Bitcoin Talk forum:
https://bitcointalk.org/index.php?topic=5060735.msg50736695#msg50736695
Please give advice and working methods? Is it possible to find at ...
1
vote
2
answers
633
views
Can we retrieve his private key using his public key in ECC?
A paper wallet is the name given to an obsolete and unsafe method of storing bitcoin which was popular between 2011 and 2016. It works by having a single private key and bitcoin address, being printed ...
0
votes
0
answers
44
views
i want to verify the following p2pkh transaction
I know to veify the p2pkh transaction we have to place the unlocking script and locking script in a stack and than evalute the stack. In such cases the the scriptpubkey_asm is of the form <OP_DUP ...
- 1
1
vote
1
answer
103
views
How should I map E'(Fp6) --> E'(Fp) starting from Bitcoin public key coordinates(x,y)?
Let $p$ be the prime number 115792089237316195423570985008687907853269984665640564039457584007908834671663
and let $E$ and $E'$ be the curve equations
$$E(\mathbb ...
- 26.4k
0
votes
1
answer
75
views
3
votes
1
answer
748
views
Is AES a group?
The question I'm wondering is whether the AES cipher is a closed cipher (which is equivalent to AES being a group). And this question interests me due to the lack of understanding of whether it is ...
- 23.7k
5
votes
1
answer
2k
views
In Bitcoin, given half the 52-character private key in WIF format, is it possible to reconstruct the whole private key?
Given the following two preconditions:
It is almost impossible to reconstruct a bitcoin private key if an attacker only has one half of the private key as well as the public key.
It is almost ...
- 146k
4
votes
1
answer
351
views
Could the multisignature scheme in bitcoin alternatively also be implemented by means of a Shamir Secret Sharing Scheme?
When I first came across the Bitcoin multisignature scheme, I wondered that it remarkably looked similar to what Shamir Secret Sharing does (SSS), but then by using facilities in the bitcoin scripting ...
CommunityBot
- 1
13
votes
2
answers
8k
views
Does secp256k1 have any known weaknesses?
I am wondering whether there are any properties of the curve which would technically make it easier to attack than any other curves of 256 bits in size.
I have heard that being a Koblitz curve, it ...
- 49.5k
0
votes
2
answers
456
views
Formula for deriving the x-coordinate using the y-coordinate (decompressing a compress public key)
According to my understanding a public key is made up of x and y coordinate and a compress public key is made up of the y-coordinate since it's possible to directly calculate the uncompress public key ...
- 146k
1
vote
1
answer
511
views
What if the hash code of the genesis block (first block in the block chain) is changed?
If so, what would happen? And if not, what are some limitations to it? The reason I am asking is because I just started getting into the cryptocurrency and am very interested in the cybersecurity ...
CommunityBot
- 1
0
votes
1
answer
105
views
Paper wallet QR codes
What is the purpose for and distinction between each of the following keys commonly used in cryptocurrencies?
Address
Tracking key
Passphrase
Private key
For context:
I got a bytecoin paper wallet ...
- 1
-1
votes
2
answers
312
views
If it is proved that P=NP, what happens to crypto? [duplicate]
If various PKC is shown to be not NP=Hard, what happens to crypto? More importantly, what happens to crypto wallets?
If it is shown that P=NP for many currently assumed to be hard problems, but ...
- 23.7k
2
votes
1
answer
182
views
In NIZK, what is the difference between "transparent“ and “without trusted setup”?
When I study a zk-SNARK scheme, the scheme claims to be transparent. Does this mean that this scheme does not require a trusted setup? Furthermore, if a NIZK scheme includes a Common Reference String (...
- 12.6k
0
votes
3
answers
272
views
bitcoin public address cryptography
I was learning about bitcoin cryptography and seen some strange bitcoin public addresses like this
1Lets1xxxx1use1xxxxxxxxxxxy2EaMkJ
1fuLL1xxxx1power1xxxxxxxxxxzatvCK
...
- 101
1
vote
1
answer
226
views
2
votes
3
answers
8k
views
19 out of 24 words of BIP39 passphrase (brute-force last 5?)
I have managed to lose 5 words of my 24 word Ledger Nano S recovery phrase. I have words 1-19 but I am missing words 20-24.
I have significant holdings on the wallet so would very much like to recover ...
- 146k
1
vote
0
answers
53
views
How can the validity of signatures in layer-2 transactions be proven in zk-rollup?
I have many questions about the details of using zk-SNARK technology in zk-rollup：
How can the validity of signatures in layer-2 transactions be proven in zk-rollup?
In zk-rollup, is a single large ...
- 115
1
vote
1
answer
190
views
What is the probability of decrypting AES-128-ECB if some of the information is available?
There is a JSON array like this:
...
- 146k
0
votes
0
answers
49
views
Practical deployments of ECC with cofactor of elliptic curves $4$ or $8$?
Are cofactor $4$ and $8$ ECC schemes widely used in practical deployments such as those in cryptocurrencies?
Can you name some practical settings where there curves are used and cryptocurrencies where ...
- 1,025
0
votes
2
answers
71
views
Proof generation in zk cryptocurrency
In a cryptocurrency with privacy e.g., zcash, where does proof generation take place? Can it happen in the client's device every time a transaction is performed?
If it happens in client's device, are ...
CommunityBot
- 1
0
votes
0
answers
46
views
The specific nature of a 51% attack - in relation to a multiple choice question that I was marked as incorrect on
In a course I'm taking the following question came up:
...
3
votes
1
answer
284
views
Does PBKDF2 HMAC 512 really only produce a maximum of ~128 bits of entropy? Regardless of input?
Andreas Antonopoulos effectively states: an input of 256bits of entropy into PBKDF2-HMAC-SHA512 will ONLY output a 64 byte hash containing ~128 bits of entropy. He states the algorithm essentially ...
- 146k
1
vote
0
answers
204
views
Quantum-safe algorithm for hiding cryptocurrency transaction amount [closed]
I have a decentralized coin system that I am trying to develop.
Each coin can be split up into 1,000,000 units.
I've been looking for a quantum-safe and practical (efficient) algorithm to send ...
- 91
1
vote
0
answers
101
views
Can we reduce the size of the XMSS signature?
As XMSS is post-quantum we can use it to secure blockchain. One of the main disadvantage of XMSS is its signature size. If we can reduce the size of the signature then we can use XMSS in the ...
CommunityBot
- 1
1
vote
0
answers
37
views
Ethereum signature as xml-dsig11
This question was originally posted in https://ethereum.stackexchange.com/questions/151471/ethereum-signature-as-xml . I post it here aswell because I rarely get any response there.
I am seeking to ...
- 111
4
votes
1
answer
212
views
Can you elaborate on pBFT for dBFT in relation to PoW and PoS consensus algorithms in layman's terms?
I've read all other related answers and googled this extensively. My intention and background in asking this question is that I am delving into cryptocurrency and blockchain technology in general. ...
CommunityBot
- 1
4
votes
1
answer
242
views
ECDSA (ecrecover) - How an attacker can construct a hash and signature that look valid
I found information, that it is possible to construct a hash and signature that look valid if the hash is not computed within the contract itself (we are talking about ECDSA/ecrecover here).
So, the ...
- 146k
1
vote
1
answer
81
views
Can the last n bitcoin blocks (including transactions) be reliable enough to be used as a seed for a PRNG or an input to a crypto hash-function?
Suggested by u/HolgerBier on reddit
Is it unpredictable enough or too difficult to manipulate (as in more than a few hundred million USD) to have a sequence of blocks?
- 23.7k
2
votes
1
answer
176
views
Provably secure cryptography in blockchains
Do you know a blockchain that does not use at all cryptographic primitives standardized by USA or other countries? It is strange to me that the security of many cryptocurrencies is based on ciphers, ...
- 425
2
votes
0
answers
24
views
Which channel protocol should I use to broadcast the message between parties?
I am building the Threshold Signature Scheme (TSS) based wallet. I would like to run the each party's node separately with different host. And these nodes should be able to send the messages through ...
1
vote
1
answer
62
views
ZKP vs disposable addresses [closed]
In other words, what does ZKP brings on top of the practice of not reusing addresses?
From my research, ZCash is currently a state of the art example of ZKP application, but what extra benefits does ...
- 139
1
vote
0
answers
65
views
Secure permutation of $E(\mathbb{F}_q)$ as a set for an elliptic curve $E$ over a finite field $\mathbb{F}_q$
Let $E$ be an elliptic curve over a finite field $\mathbb{F}_q$. For simplicity, let the group $E(\mathbb{F}_q)$ be of prime order.
Assume that I know how to construct an efficiently computable ...
- 425