All Questions
Tagged with cryptocurrency dsa
20 questions
1
vote
1
answer
102
views
How should I map E'(Fp6) --> E'(Fp) starting from Bitcoin public key coordinates(x,y)?
Let $p$ be the prime number 115792089237316195423570985008687907853269984665640564039457584007908834671663
and let $E$ and $E'$ be the curve equations
$$E(\mathbb ...
- 23
0
votes
0
answers
49
views
Practical deployments of ECC with cofactor of elliptic curves $4$ or $8$?
Are cofactor $4$ and $8$ ECC schemes widely used in practical deployments such as those in cryptocurrencies?
Can you name some practical settings where there curves are used and cryptocurrencies where ...
- 1,025
4
votes
1
answer
242
views
ECDSA (ecrecover) - How an attacker can construct a hash and signature that look valid
I found information, that it is possible to construct a hash and signature that look valid if the hash is not computed within the contract itself (we are talking about ECDSA/ecrecover here).
So, the ...
- 143
2
votes
0
answers
24
views
Which channel protocol should I use to broadcast the message between parties?
I am building the Threshold Signature Scheme (TSS) based wallet. I would like to run the each party's node separately with different host. And these nodes should be able to send the messages through ...
2
votes
0
answers
814
views
ECDSA Common Nonce Reuse Attack
so I recently stumbled upon this video by @bertcmiller who created two transactions with the same nonce "k". That seen I researched quite a lot of pages explaining how to recover the private ...
- 21
0
votes
1
answer
247
views
Is it impossible to extract any data from an ECDSA signature of hashed data
I am trying to write a function that, given an EIP712 ECDSA signature, verifies the signature was signed by a particular person, and then (somehow) retrieves the information that is encoded in the ...
- 103
3
votes
1
answer
373
views
Is it theoretically possible to delegate public key generation?
Imagine the following scenario:
In a given cryptocurrency, privacy should be as high as possible.
For this purpose, a new account with a new address is created for every incoming transaction (the ...
1
vote
1
answer
74
views
Which application protocols use elliptic curve key recovery?
Section 4.1.6 of https://www.secg.org/sec1-v2.pdf describes a technique for recovering public keys from ECDSA signatures.
I guess Ethereum uses this. Like if you want to validate a particular ...
- 2,959
0
votes
0
answers
199
views
How to get public key and bitcoin compressed address from the coordinates (x,y) generated by ECDSA?
I have my x (0xca668a8b5f71e8724aada4b5343c28702a481787855cc42228b8fff97fe94d6a) and y (0x19dd3a603a55b3d8c5f62cbe177b9b63693fb8c91d76845bafc843a7aa19ea55) coordinates generated by ecdsa with a ...
- 1
0
votes
1
answer
590
views
Calculating the point on the curve during ECDSA signature verification
I'm confused as to how he got (62, 44) as an answer within this article: https://www.coindesk.com/math-behind-bitcoin
0
votes
1
answer
875
views
Comparisons of ECDSA, EdDSA and BLS Signatures in Blockchain: Pros and Cons
As we know, the most used digital scheme in Blockchain is ECDSA. For now, more and more blockchain projects, I've noticed, are considering substituting EdDSA and BLS signature scheme as the new one. ...
1
vote
1
answer
1k
views
ECDSA vulnerability related to recovering private key using same r [closed]
I'm considering this for bitcoin transaction as it uses ECDSA so if the signer generates two signatures suppose s1 and s2.
where:
I get it that any attacker who have s1 and s2 can recover its private ...
2
votes
2
answers
2k
views
Could RSA keypairs be used for cryptocurrency addresses?
A bitcoin address is created from an ECDSA keypair. It is common to use use a hashed version of the public key as the shared address, but the original bitcoin implementation also allowed for using the ...
- 21
-5
votes
1
answer
234
views
Someone discover two pair privkey for one address
I have a question about bitcoin privkey:
If you have TWO pair privkey(compressed and uncompressed) I wrote again TWO pair, yes i know, many person say - it is not possible, but...
And this works ...
- 1
2
votes
1
answer
285
views
Time efficiency of Bitcoin Multi-signature Vs. threshold signature
I read this paper (Securing Bitcoin wallets via a new DSA/ECDSA threshold signature scheme) that illustrated that threshold signature is the best solution to avoid single point of failure
but I think ...
- 41
9
votes
1
answer
2k
views
Simple digital signature example that one could compute without a computer?
I am working on a document to explain Bitcoin to students. But I am having a hard time translating the principle described in §2 of the Bitcoin whitepaper in layman's terms.
There is a great question ...
- 207
2
votes
1
answer
514
views
Encoding a message to a point of curve y^2=x^3+7 and Bitcoin Core
Where should I look at in Bitcoin Core source code to figure out how the signature process transform a message in a curve point?
To sign a transaction (message) in the Bitcoin system, you need to ...
- 29
2
votes
1
answer
458
views
Sane implementations of Bitcoin cryptography routines w.r.t. side-channel attacks
Bitcoin uses SHA-256, Base58Check, ECDSA (Sep256k1) and RIPEMD-160 as the basis of its encryption (see this article for a short guide on how addresses are created).
I would like to create an iOS-...
- 131
7
votes
1
answer
2k
views
Elliptic curve cryptography related key attacks [closed]
This question is an extension of Families of public/private keys in elliptic curve cryptography
As described above, bitcoin "type 2" deterministic wallets use a root private/public key pair, where ...
- 95
21
votes
1
answer
986
views
How to provide secure "vanity" bitcoin address service?
Bitcoin addresses are RIPEMD-160 hashes of the public portion of a public/private ECDSA keypair (along with an abbreviated hash of the hash to provide a check code, as @pulpspy notes in a comment). ...
- 580