Title: Nonce talk Post by: COBRAS on May 17, 2024, 04:27:40 AM Nonce r from rsz is a X coodinate of publickbkey with privkey = nonce(k), is exact is a privkey of nonce pubkey R.
Nonce pubkey is calculatevin sage R =E.Lift_x(r) R / k = G Question, what is a formula of r from rsz ? Someone understand how to find k from rsz+ pubkey +...... ? One of way for finding k , I think is disassemble a Lift_x function. IF this function not a simple calculation of seco256k1 formula of point coordinates with given X maybe has a way to solve Title: Re: Nonce talk Post by: MysteryMiner on May 17, 2024, 04:50:48 PM You are posting nonce here
Title: Re: Nonce talk Post by: whanau on May 17, 2024, 07:18:27 PM Here are your options.
Code: def extended_gcd(aa, bb): I am sure more mathematically minded people can offer alternate arrangements. Title: Re: Nonce talk Post by: jacky19790729 on May 17, 2024, 07:40:43 PM Nonce r from rsz is a X coodinate of publickbkey with privkey = nonce(k), is exact is a privkey of nonce pubkey R. r from k , not X coodinate of publickbkey with private key Someone understand how to find k from rsz+ pubkey +...... ? find k must know rsz + private key pvk = (inv(r) * ( (k*s)-z ) ) % N k = (inv(s) * ( z + r * pvk ) ) % N s = (inv(k) * ( z + r * pvk) ) % N r = (inv(pvk) * ((k * s) - z ) ) % N if r,s,z is the same, private key and k can be any combination ( 2^256 * 2^256 ) Code:
Title: Re: Nonce talk Post by: COBRAS on May 17, 2024, 09:12:04 PM Nonce r from rsz is a X coodinate of publickbkey with privkey = nonce(k), is exact is a privkey of nonce pubkey R. r from k , not X coodinate of publickbkey with private key Someone understand how to find k from rsz+ pubkey +...... ? find k must know rsz + private key pvk = (inv(r) * ( (k*s)-z ) ) % N k = (inv(s) * ( z + r * pvk ) ) % N s = (inv(k) * ( z + r * pvk) ) % N r = (inv(pvk) * ((k * s) - z ) ) % N if r,s,z is the same, private key and k can be any combination ( 2^256 * 2^256 ) Code:
You data with incorrect nonce, because you have different nonce with one r. For correct nonce k * G = P(r, y ). This is a example for nonce, I not need d and z for finding nonce. Ttry too, calculate nonce with s= 1 and z = 0 ? Do you have same result for k ? My next 3 messages will be a examples of my calcs. Ecamples with some of my technical result, need read first example , then next 2veill be simple for readings. Title: Re: Nonce talk Post by: COBRAS on May 17, 2024, 11:02:41 PM nonce = 12345678
('r', 91699739317935258627372771550459504326006289891191381848862551863464593478869, 'cabc3692f1f7ba75a8572dc5d270b35bcc00650534f6e5ecd6338e55355454d5') ('s', 22470372326531182916048759846739219230161803771746602100872838172795117428239, '31adc7b06b05e7d950c11e0c4e2f0cca182f72924d7fdea9fdff5c29ee7ede0f') ('z', 77933714094255861201447687678278381229091537417560707361169638023191559091456, 'ac4ceb44a4ae896158c14566b2523afbb0e257fd40af4fccddc95a922efb3500') ('r/ i', 7427679493822474442260098760915318245462605609120161877611140665054166L, 73926912313746221600422969923536397027686634004140167227457792625513198349354) ('G', (55066263022277343669578718895168534326250603453777594175500187360389116729240 : 32670510020758816978083085130507043184471273380659243275938904335757337482424 : 1)) !!!! THIS IS A R = E.Lift_x(r) result: also R = nonce * G. X coordinate if point R = r, secret of R = nonce ('R', (91699739317935258627372771550459504326006289891191381848862551863464593478869 : 79450615476943552632377782025199242003620925313220596427418775135908257610356 : 1)) ('R/ r', (91413277307999602576679348036317809691089147061819652700440218480920854650493 : 94705172691527202884959487452335115481820880277158595931101427379039202433953 : 1)) ('G * r', (95231593988530263025268019993470436341492878349759617261352084706098574401879 : 76003703190188366910194155426503499416926170925285666609448074121165638884991 : 1)) !!!!!!!! ('G * i' = ,R, (91699739317935258627372771550459504326006289891191381848862551863464593478869 : 79450615476943552632377782025199242003620925313220596427418775135908257610356 : 1), NONCE =12345678 = i, for find nonce need find privkey of P(r,y) !!!!!!!! ('R / i = G !!!', (55066263022277343669578718895168534326250603453777594175500187360389116729240 : 32670510020758816978083085130507043184471273380659243275938904335757337482424 : 1)) ('G*r*i', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) ('R*r', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) Title: Re: Nonce talk Post by: COBRAS on May 17, 2024, 11:05:05 PM This is code with s= 1, z= 0. Nonce is a equal to nonce with original s, z.
('r', 91699739317935258627372771550459504326006289891191381848862551863464593478869, 'cabc3692f1f7ba75a8572dc5d270b35bcc00650534f6e5ecd6338e55355454d5') ('s', 1, '1') ('z', 0, '0') ('r/ i', 7427679493822474442260098760915318245462605609120161877611140665054166L, 73926912313746221600422969923536397027686634004140167227457792625513198349354) ('G', (55066263022277343669578718895168534326250603453777594175500187360389116729240 : 32670510020758816978083085130507043184471273380659243275938904335757337482424 : 1)) ('R', (91699739317935258627372771550459504326006289891191381848862551863464593478869 : 79450615476943552632377782025199242003620925313220596427418775135908257610356 : 1)) ('R/ r', (91413277307999602576679348036317809691089147061819652700440218480920854650493 : 94705172691527202884959487452335115481820880277158595931101427379039202433953 : 1)) ('G * r', (95231593988530263025268019993470436341492878349759617261352084706098574401879 : 76003703190188366910194155426503499416926170925285666609448074121165638884991 : 1)) ('G * i', (91699739317935258627372771550459504326006289891191381848862551863464593478869 : 79450615476943552632377782025199242003620925313220596427418775135908257610356 : 1), 12345678) ('R / i = G !!!', (55066263022277343669578718895168534326250603453777594175500187360389116729240 : 32670510020758816978083085130507043184471273380659243275938904335757337482424 : 1)) ('G*r*i', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) ('G*r*i', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) ('R*r', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) ('PUBKEY', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) ('K(pubkey)', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) ('BP', (95231593988530263025268019993470436341492878349759617261352084706098574401879 : 76003703190188366910194155426503499416926170925285666609448074121165638884991 : 1)) ('BP*i', (23694944965155815005806370254050820897870832455751014086648068325374125183769 : 72770318354597575747088143555334990101737712002921675232392745277748862830172 : 1)) ('stride', 91699739317935258627372771550459504326006289891191381848862551863464593478869, 'hex r', 'cabc3692f1f7ba75a8572dc5d270b35bcc00650534f6e5ecd6338e55355454d5', 'r %n:', 'cabc3692f1f7ba75a8572dc5d270b35bcc00650534f6e5ecd6338e55355454d5') ('start range', 0) yes!!! ('Found real k:', 12345678, 'i', 'i%n', 12345678, 'hex i%n', 'bc614e') ('i / stride', 102841846352306188226513951450991021872527204226560155635918443861399890536377) Title: Re: Nonce talk Post by: COBRAS on May 17, 2024, 11:05:54 PM Now I not use original s and z , s= 1 because calcs of modular invercion give me error then modinv(0) and noot need edit all code for remove s and z from formulas: nonce = 6 ('r', 115780575977492633039504758427830329241728645270042306223540962614150928364886, 'fff97bd5755eeea420453a14355235d382f6472f8568a18b2f057a1460297556') ('s', 1, '1') ('z', 0, '0') ('r/ i', 19296762662915438839917459737971721540288107545007051037256827102358488060814L, 96491488821126235788964783077096993442179817064390320625660269196703929057039) ('G', (55066263022277343669578718895168534326250603453777594175500187360389116729240 : 32670510020758816978083085130507043184471273380659243275938904335757337482424 : 1)) ('R', (115780575977492633039504758427830329241728645270042306223540962614150928364886 : 78735063515800386211891312544505775871260717697865196436804966483607426560663 : 1)) ('R/ r', (64539638574909914201464920709490791805550015061929458491040650138133077991612 : 24843128135812653164374146652732983116575858545376386173522986212406802597247 : 1)) ('G * r', (35671562626417242553516379018837644888384153781026704107247909605250122925475 : 24854100414953353366925262716821661496591256177379627589485089065011822957733 : 1)) ('G * i', (115780575977492633039504758427830329241728645270042306223540962614150928364886 : 78735063515800386211891312544505775871260717697865196436804966483607426560663 : 1), 6) ('R / i = G !!!', (55066263022277343669578718895168534326250603453777594175500187360389116729240 : 32670510020758816978083085130507043184471273380659243275938904335757337482424 : 1)) ('G*r*i', (83713544949310621073111602184378347401653653711846647537453958918525557556 : 15567843838197501364772534451023699018524046327927424384426971674530257773251 : 1)) ('R*r', (83713544949310621073111602184378347401653653711846647537453958918525557556 : 15567843838197501364772534451023699018524046327927424384426971674530257773251 : 1)) ('PUBKEY', (83713544949310621073111602184378347401653653711846647537453958918525557556 : 15567843838197501364772534451023699018524046327927424384426971674530257773251 : 1)) ('K(pubkey)', (83713544949310621073111602184378347401653653711846647537453958918525557556 : 15567843838197501364772534451023699018524046327927424384426971674530257773251 : 1)) ('BP', (35671562626417242553516379018837644888384153781026704107247909605250122925475 : 24854100414953353366925262716821661496591256177379627589485089065011822957733 : 1)) ('BP*i', (83713544949310621073111602184378347401653653711846647537453958918525557556 : 15567843838197501364772534451023699018524046327927424384426971674530257773251 : 1)) ('stride', 115780575977492633039504758427830329241728645270042306223540962614150928364886, 'hex r', 'fff97bd5755eeea420453a14355235d382f6472f8568a18b2f057a1460297556', 'r %n:', 'fff97bd5755eeea420453a14355235d382f6472f8568a18b2f057a1460297556') ('start range', 0) yes!!! ('Found real k:', 6, 'i', 'i%n', 6, 'hex i%n', '6') ('i / stride', 92881243615770048638449299342474665533833408430538685617041630338404606509534) Title: Re: Nonce talk Post by: COBRAS on May 17, 2024, 11:08:09 PM Then @Krashfire find his nonce in 6 month, looks like he find I like in my calcs, but then he put small finded i to firmukas with z,s, modinv of s,z yes he get a nonce 256 bit, maybe I not right but finding 256 bit in 6 monts is imposible...
Tank you all for yours formulas, I think formulas of k without point is , maybe interesting if replace x to 1 and see what's is going on.... Any more ideas ? Title: Re: Nonce talk Post by: COBRAS on May 18, 2024, 05:05:14 AM Here are your options. Code: def extended_gcd(aa, bb): I am sure more mathematically minded people can offer alternate arrangements. This dcrypt calcs incorrect for your rsz in code and for my rsz too ... Title: Re: Nonce talk Post by: jacky19790729 on May 18, 2024, 12:34:52 PM This dcrypt calcs incorrect for your rsz in code and for my rsz too ... Try it Example, find signing secret. https://rawcdn.githack.com/nlitsme/bitcoinexplainer/aa50e86e8c72c04a7986f5f7c43bc2f98df94107/ecdsacrack.html (https://rawcdn.githack.com/nlitsme/bitcoinexplainer/aa50e86e8c72c04a7986f5f7c43bc2f98df94107/ecdsacrack.html) My RSZ, K , Private Key is correct Code: r = 0xA0006BD73C2E587208D8A2BFDD3E650DC0307C6B6AFBFADA5A8434FBDF7FB6BE |