Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: MikeJ_NpC on November 14, 2023, 02:48:27 AM



Title: is there another way to calc for S ?
Post by: MikeJ_NpC on November 14, 2023, 02:48:27 AM
Hey,

Just wondering if there is another way to calc for S and rewrite this and remove X if applicable

s1=(((x*rr)+z1)%N)

Thanks


Title: Re: is there another way to calc for S ?
Post by: stwenhao on November 14, 2023, 05:58:59 AM
Quote
and remove X if applicable
Duh, you mean x=1? You want to remove it? Then, just do that. Which means, if you want to replace "x*rr" with "rr", then the conclusion is simply that "x=1".

Seriously: if there would be a way, that would mean ECDSA would be broken. So, your question could be simplified into "is there another way to break ECDSA?".

And the answer is also obvious: if there is no way, then nobody will tell you, how to do it. But if there is a way, then anyone, who will know the answer, will simply hide it. The incentive is just too big.

Which means, in both cases, the answer is "no, you cannot do that".