Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: krashfire on January 11, 2023, 04:02:25 AM



Title: Secp256k1 Bitcoin signatures formula
Post by: krashfire on January 11, 2023, 04:02:25 AM
Just putting it out here for those of you who, like me are very new in ECDSA Secp256k1 and wondering how to calculate the signatures or need hte formulas.

The M here means the same as Z signature in bitcoin transaction ..so input your Z in the M boxes. Most importantly, the formulas are given there as well.

why does different people call it Z, M or sometimes even call it H(m). i have no idea. confusing for me too earlier on but i caught up.  ;D

https://rawcdn.githack.com/nlitsme/bitcoinexplainer/aa50e86e8c72c04a7986f5f7c43bc2f98df94107/ecdsacrack.html (https://rawcdn.githack.com/nlitsme/bitcoinexplainer/aa50e86e8c72c04a7986f5f7c43bc2f98df94107/ecdsacrack.html)



For those of you who needs to decompress your public key and get the XY Coordinates,
https://github.com/RoyNahar/bitcoin-public-key-decompress-tool (https://github.com/RoyNahar/bitcoin-public-key-decompress-tool)




Title: Re: Sec256k1 Bitcoin signatures formula
Post by: stanner.austin on January 11, 2023, 08:36:33 AM
Hello
In developers coding terms
M = message
H = Hashed message or hash
Z = bitcoin specific for double SHA2
K = nonce to randomize your sign output.
X = bitcoin specific for private key


Title: Re: Secp256k1 Bitcoin signatures formula
Post by: pooya87 on January 11, 2023, 12:31:50 PM
The standard and the algorithm is the same everywhere but since there are different sources that have "written" that standard, they chose different terminologies. For example the "Standards for Efficient Cryptography" they use the term "e" in ECDSA formula for the integer derived from the message hash while in "Handbook of Applied Cryptography" it uses "h(m)" and wikipedia uses the term "z" for that integer.