Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: ecdsa123 on September 25, 2022, 07:20:08 PM



Title: 1
Post by: ecdsa123 on September 25, 2022, 07:20:08 PM
1


Title: Re: first pubkey coliisions - in signature transactions:)
Post by: NotATether on September 26, 2022, 07:26:17 AM
What is the range of the nonce used in your example, since if the nonce range is small enough (I think less than 2^248?), it is trivial to derive a solution for the private key.


Title: Re: first pubkey coliisions - in signature transactions:)
Post by: NotATether on September 26, 2022, 09:50:20 AM
" if the nonce range is small enough (I think less than 2^248?), it is trivial to derive a solution for the private key"

how we can derive a solution for the private key in this example? I have no idea

I wrote some equations for the private key which you can view here (https://notatether.com/talk-cryptography/ecdsa-and-schnorr-signatures-from-the-same-private-key/). In particular, the first one which calculates the private key from r, s, and z (in the post it's called h) will be useful.


Title: Re: first pubkey coliisions - in signature transactions:)
Post by: puzzleplayer on October 01, 2022, 05:29:24 AM

I try run this code (upper) on sagemath cell online
result is

signature matches
signature matches
False