Questions tagged [secp256k1]

This tag should be used for anything related to the secp256k1 algorithm used for Bitcoin's public key cryptography.

16 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers

secp256k1 scalar decomposing and prime field arithmetic

I'm currently studying the elliptic curve secp256k1 implementation. In my understanding, it has efficiently computable endomorphisms: We can find out a pair of number $\lambda$ and $\beta$ from the ...
luke's user avatar
  • 61
3 votes
0 answers

EC public key with leading zeros

Let us take example of secp256k1 curve. The current known public key with most leading zero (in x cordinate) is: ...
madhurkant's user avatar
2 votes
0 answers

Safety of reusing same seed to derive secp256k1 keys and AES-256-GCM

The use case here is to deterministically generate a multi-use wallet from a single 12-word BIP39 mnemonic. Currently a standard process for deriving secp256k1 keypairs is implemented, e.g., using a ...
snsdgm's user avatar
  • 21
1 vote
0 answers

How to know the number of digits in the decimals place in elliptic curve division result?

$p$ - is the order of the finite field $n$ - is the order of the group. Private keys can range from $1$ (the generator point $G$) to $n - 1$. All the private keys ($Priv$) lie in certain ranges of 2. $...
Maltoon Yezi's user avatar
1 vote
0 answers

Using Deterministic ECDSA (secp256k1) Signature as a Cipher Key in Symmetric Encryption

I'm exploring the security implications of utilizing a deterministic ECDSA signature as a cipher key for symmetric encryption and would appreciate insights from the community. Here's the setup I'm ...
landabaso's user avatar
  • 111
1 vote
0 answers

Can lattice attack work MSB or LSB are unkown but 16 bytes of private key are known?

I have been reading about lattice attack on ECDSA when partial bits of nonce are known for amount of signatures, So i went through some source code trying to understand how it works. First of all, ...
Alexio puk2sefu's user avatar
1 vote
0 answers

How to calculate points for twist?

How I can find the point to perform this twist attack - English version of previous link: This video has additional ...
Matiy's user avatar
  • 29
1 vote
0 answers

What data can be derived from ECDSA signature and message?

I generate a random message m sent to a device that calculates sig(m, privKey) with secp256k1...
ln3xp's user avatar
  • 11
0 votes
0 answers

Same message different nonce but similarities in r value of the signatures(r,s)

I'm studying a case where when i sign a same message with the same private key and a different nonce, i sometimes get signatures (r,s) where r values share some similarities (same numbers at the same ...
PrinceZee's user avatar
  • 101
0 votes
2 answers

Trouble detecting cyclic group order crossovers in SECP256K1

There's a problem in detecting whether the sum of public key addition has crossed the cyclic group order boundary For this example, think of public keys $Pub$ as private keys $Priv$, (private scalars),...
Maltoon Yezi's user avatar
0 votes
0 answers

ECDSA private key recovery

I have a bunch of signatures (1000) signed with ECDSA secp256k1 curve. I can verify all of them with the same public key. I have studied attacks are performed against ECDSA signatures using known MSB ...
Nightbird's user avatar
0 votes
0 answers

Help determine points on P-256 lie on the actual curve

The curve equation for P-256 is: NIST P-256 y^2 = x^3-3x+41058363725152142129326129780047268409114441015993725554835256314039467401291 Below I am generating key data, including the secret key "d&...
Steve237's user avatar
0 votes
0 answers

Security of SecretKey addition and PublicKey multiplication in secp256k1

I understand that: $[a+b]G = [a]G + [b]G$ where $a$ and $b$ are secret keys. (See: Is there a relationship between the secp256k1 public key of the sum of two private keys, and the public keys of ...
fadedbee's user avatar
  • 918
0 votes
0 answers

Bitcoin Key Recovery Without Nonce Re-Use

There are a lot of questions in these forums regarding the recovery of private keys. But I'm here to postulate on something unique to a specific piece of research that I looked into recently. The ...
librehash's user avatar
  • 145
0 votes
0 answers

Is there a relation between the private keys of secp256k1 public keys of opposite parities?

From observation, 32 bit public key values of opposite parities are either both valid, or both invalid. ...
fadedbee's user avatar
  • 918
-2 votes
0 answers

Understanding secp256k1 elliptic curve subtraction formula

Point doubling formula Calculate the slope $\lambda = (3\times Q_x^2) \times$ pow($2 \times Q_y$, -1, $p$) % $p$ Calculate the new point coordinates $R_x = (λ^2 - 2 \times Q_x)$ % $p$ $R_y = (\lambda \...
Favour's user avatar
  • 37