All Questions
Tagged with monero or cryptocurrency
291 questions
0
votes
0
answers
21
views
Is it possible to convert public key to private key if anybody can decode doubling to singling?
If a point is P then,
P => Doubling operation => 2P
If anybody can reverse it, i,e
2P => Reverse Doubling => P
Will he/she be able to calculate private key from the specific public key of ...
- 125
-2
votes
0
answers
33
views
I was scammed in crypto [closed]
I was approached by individuals offering an investment opportunity in cryptocurrency. After some back and forth, I was persuaded to send funds (Ethereum in this case) to a wallet address they provided....
- 1
0
votes
0
answers
19
views
How do Layer 2 solutions like Lightning Network enhance Bitcoin's scalability and transaction speed? [closed]
Bitcoin’s transaction speed and scalability have been ongoing challenges. How does the implementation of Layer 2 solutions like the Lightning Network address these issues, and what are the potential ...
- 1
0
votes
0
answers
4
views
Error While Running sugar upload in NEW SOLANA token creation [migrated]
While running sugar upload command from my cli, I see below error-
...
1
vote
1
answer
50
views
Does FROST threshold signing go well with BIP340?
FROST is a popular threshold signing protocol for Schnorr-style signatures.
BIP340 is a specification for an instantiation of a Schnorr-style signature scheme for Bitcoin Taproot. Specifically, they ...
- 697
0
votes
1
answer
44
views
How to determine large point for the same x axis in the elliptic curve cryptography?
For a given X value of elliptic curve cryptography there are two Y values. One point is P(x,y) and another point is Q(x1,y1) where P =-Q or Q = -P. Suppose given X value is ...
- 21
0
votes
1
answer
70
views
Can parties in an MPC protocol establish a shared secret with an external party?
Creating a shared secret(ECDH) with a single private key is easy:
a·B = b·A
Does the same apply to MPC? and if so how?
Based on Gennaro and Goldfeder CCS 2018
0
votes
0
answers
59
views
Why hashing when generating account from public key?
When producing an account out of public key it's a common approach to hash the latter multiple times (sometimes using different algos) before encoding and taking a portion of the product. Is this done ...
2
votes
1
answer
184
views
2
votes
1
answer
120
views
Efficient NOT in set proof?
I am looking for a solution for a very specific problem, I have one, but I am not statisfied with it and it feels there must be a much more efficient way to do this.
I have a hashed value of 256 bits. ...
- 155
0
votes
0
answers
44
views
i want to verify the following p2pkh transaction
I know to veify the p2pkh transaction we have to place the unlocking script and locking script in a stack and than evalute the stack. In such cases the the scriptpubkey_asm is of the form <OP_DUP ...
- 1
1
vote
1
answer
102
views
How should I map E'(Fp6) --> E'(Fp) starting from Bitcoin public key coordinates(x,y)?
Let $p$ be the prime number 115792089237316195423570985008687907853269984665640564039457584007908834671663
and let $E$ and $E'$ be the curve equations
$$E(\mathbb ...
- 23
0
votes
1
answer
75
views
3
votes
1
answer
748
views
Is AES a group?
The question I'm wondering is whether the AES cipher is a closed cipher (which is equivalent to AES being a group). And this question interests me due to the lack of understanding of whether it is ...
- 53
5
votes
1
answer
2k
views
In Bitcoin, given half the 52-character private key in WIF format, is it possible to reconstruct the whole private key?
Given the following two preconditions:
It is almost impossible to reconstruct a bitcoin private key if an attacker only has one half of the private key as well as the public key.
It is almost ...
- 151
-1
votes
2
answers
312
views
If it is proved that P=NP, what happens to crypto? [duplicate]
If various PKC is shown to be not NP=Hard, what happens to crypto? More importantly, what happens to crypto wallets?
If it is shown that P=NP for many currently assumed to be hard problems, but ...
2
votes
1
answer
182
views
In NIZK, what is the difference between "transparent“ and “without trusted setup”?
When I study a zk-SNARK scheme, the scheme claims to be transparent. Does this mean that this scheme does not require a trusted setup? Furthermore, if a NIZK scheme includes a Common Reference String (...
- 115
0
votes
2
answers
455
views
Formula for deriving the x-coordinate using the y-coordinate (decompressing a compress public key)
According to my understanding a public key is made up of x and y coordinate and a compress public key is made up of the y-coordinate since it's possible to directly calculate the uncompress public key ...
- 45
1
vote
1
answer
226
views
1
vote
0
answers
53
views
How can the validity of signatures in layer-2 transactions be proven in zk-rollup?
I have many questions about the details of using zk-SNARK technology in zk-rollup：
How can the validity of signatures in layer-2 transactions be proven in zk-rollup?
In zk-rollup, is a single large ...
- 115
1
vote
1
answer
190
views
What is the probability of decrypting AES-128-ECB if some of the information is available?
There is a JSON array like this:
...
- 11
0
votes
0
answers
49
views
Practical deployments of ECC with cofactor of elliptic curves $4$ or $8$?
Are cofactor $4$ and $8$ ECC schemes widely used in practical deployments such as those in cryptocurrencies?
Can you name some practical settings where there curves are used and cryptocurrencies where ...
- 1,025
0
votes
0
answers
46
views
The specific nature of a 51% attack - in relation to a multiple choice question that I was marked as incorrect on
In a course I'm taking the following question came up:
...
0
votes
2
answers
71
views
Proof generation in zk cryptocurrency
In a cryptocurrency with privacy e.g., zcash, where does proof generation take place? Can it happen in the client's device every time a transaction is performed?
If it happens in client's device, are ...
- 1
3
votes
1
answer
284
views
Does PBKDF2 HMAC 512 really only produce a maximum of ~128 bits of entropy? Regardless of input?
Andreas Antonopoulos effectively states: an input of 256bits of entropy into PBKDF2-HMAC-SHA512 will ONLY output a 64 byte hash containing ~128 bits of entropy. He states the algorithm essentially ...
- 33
1
vote
0
answers
204
views
Quantum-safe algorithm for hiding cryptocurrency transaction amount [closed]
I have a decentralized coin system that I am trying to develop.
Each coin can be split up into 1,000,000 units.
I've been looking for a quantum-safe and practical (efficient) algorithm to send ...
- 91
1
vote
0
answers
37
views
Ethereum signature as xml-dsig11
This question was originally posted in https://ethereum.stackexchange.com/questions/151471/ethereum-signature-as-xml . I post it here aswell because I rarely get any response there.
I am seeking to ...
- 111
4
votes
1
answer
242
views
ECDSA (ecrecover) - How an attacker can construct a hash and signature that look valid
I found information, that it is possible to construct a hash and signature that look valid if the hash is not computed within the contract itself (we are talking about ECDSA/ecrecover here).
So, the ...
- 143
1
vote
1
answer
81
views
Can the last n bitcoin blocks (including transactions) be reliable enough to be used as a seed for a PRNG or an input to a crypto hash-function?
Suggested by u/HolgerBier on reddit
Is it unpredictable enough or too difficult to manipulate (as in more than a few hundred million USD) to have a sequence of blocks?
2
votes
1
answer
176
views
Provably secure cryptography in blockchains
Do you know a blockchain that does not use at all cryptographic primitives standardized by USA or other countries? It is strange to me that the security of many cryptocurrencies is based on ciphers, ...
- 425
2
votes
0
answers
24
views
Which channel protocol should I use to broadcast the message between parties?
I am building the Threshold Signature Scheme (TSS) based wallet. I would like to run the each party's node separately with different host. And these nodes should be able to send the messages through ...
1
vote
0
answers
101
views
Can we reduce the size of the XMSS signature?
As XMSS is post-quantum we can use it to secure blockchain. One of the main disadvantage of XMSS is its signature size. If we can reduce the size of the signature then we can use XMSS in the ...
1
vote
1
answer
62
views
ZKP vs disposable addresses [closed]
In other words, what does ZKP brings on top of the practice of not reusing addresses?
From my research, ZCash is currently a state of the art example of ZKP application, but what extra benefits does ...
- 111
1
vote
0
answers
65
views
Secure permutation of $E(\mathbb{F}_q)$ as a set for an elliptic curve $E$ over a finite field $\mathbb{F}_q$
Let $E$ be an elliptic curve over a finite field $\mathbb{F}_q$. For simplicity, let the group $E(\mathbb{F}_q)$ be of prime order.
Assume that I know how to construct an efficiently computable ...
- 425
1
vote
0
answers
54
views
In Zcash, how does a recipient look up which transactions belong to him/her?
For Monero, the scheme for stealth addresses is pretty straightforward. (For example: https://monero.stackexchange.com/questions/1500/what-is-a-stealth-address) However, I haven't found any details on ...
- 23
-1
votes
1
answer
61
views
Zero knowledge proof to validate/invalidate a claim
Have a look at the Twitter conversation below in the screenshots.
@theveveshow asks if @trader1sz has sent ETH to the girl in question? @trader1sz responds that the girl in question has indeed sent ...
- 11
1
vote
0
answers
41
views
How does the Mongomery Algorithm work? [closed]
can someone please explain to me what's the role of montgomery reduction algorithm and how to implement it in python. I wrote the code below to calculate a*b mod m but it doesn't seem to work well.
...
- 11
1
vote
1
answer
123
views
How to Ensure Security in a Gaming Peer to Peer Network
I've been recently thinking about building a c++ poker game that would let players to play over sockets in a peer to peer network. However I do not know how security would be ensured. I was thinking ...
1
vote
0
answers
446
views
Understanding seed phrase, private key, wallet addresses
I have a question about Cryptocurrency wallets like Metamask (soft) or Ledger (hard).
How is a 12 or 24 word seed phrase enough to show the same crypto addresses in any crypto wallet that supports the ...
- 139
2
votes
1
answer
226
views
How to implement a "viewing key" for secrets proved by zero knowledge proofs?
In ZCash, Monero etc, the sender/receiver addresses as well as transaction details are hidden. However, with a viewing key, a third party can see the exact details of the transaction or all ...
- 21
2
votes
0
answers
814
views
ECDSA Common Nonce Reuse Attack
so I recently stumbled upon this video by @bertcmiller who created two transactions with the same nonce "k". That seen I researched quite a lot of pages explaining how to recover the private ...
- 21
20
votes
1
answer
6k
views
Will IBM's Condor quantum processor run Shor's Algorithm to crack a 256-bit Elliptic Curve key?
Yesterday IBM announced that they have a 433 bit quantum computer, called Osprey. There is nothing in the press releases I can find that says whether it can or cannot run Shor's Algorithm.
They also ...
- 353
0
votes
1
answer
247
views
Is it impossible to extract any data from an ECDSA signature of hashed data
I am trying to write a function that, given an EIP712 ECDSA signature, verifies the signature was signed by a particular person, and then (somehow) retrieves the information that is encoded in the ...
- 103
-4
votes
1
answer
630
views
Compressed Address public key [closed]
Is it possible to get the x, y of the compressed public key?
I have decompress it and naturally it gives the xy of the decompress public key.
I need the xy coordinates of my compressed public key . ...
2
votes
1
answer
779
views
How does Ethereum BLS signature verification works?
I am implementing BLS signature verification on smart contracts and I have a question regarding the way that Ethereum verifies the signature. Recall that bls signature works as
$e(P_2,H(m)_1)_T=e(G_2,...
- 269
0
votes
1
answer
2k
views
Finding the private key with the transaction signature [duplicate]
I have two ETH transactions (both belonging to the same address) that both have the same r value in the transaction signature, is it possible to extract the private key from it?
Details of both ...
0
votes
1
answer
61
views
Is there any way to ensure that a network merge, after a parition, never causes disagreements?
Background: A cryptocurrency, such as Bitcoin, have a global order of all transactions that is guaranteed to be agreed by all participating nodes. With Bitcoin, this is ensured by making the longest ...
- 573
3
votes
0
answers
354
views
Are digital signatures a type of zero-knowledge proof?
Are the digital signatures used in cryptocurrencies such as Bitcoin a type of zero-knowledge proof?
2
votes
1
answer
179
views
How easy is it to know how many preimages an image might have, given that there's at least one (preimage, image) pair?
I have been considering an approach to incentivize cryptocurrency miners to verify claims of quantum computational supremacy. Briefly, miners find collisions $f(x_1)=f(x_2)=y$ of some known $f:m+1\...
- 289
-1
votes
2
answers
175
views
Allow decryption key to be known only after a certain time [duplicate]
We have a smart contract containing encrypted data that should remain encrypted till a specified timeLimit.
Then, the decryption key would be made public, for everyone to read that data.
We want to ...
- 1