Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: COBRAS on November 14, 2021, 04:28:24 PM



Title: R,s,z qeschion !
Post by: COBRAS on November 14, 2021, 04:28:24 PM
R,s,z of signature transaction  is only for input or outgoing transactions ??????

Tnanx !!!


Title: Re: R,s,z qeschion !
Post by: COBRAS on November 14, 2021, 05:06:56 PM
R,s,z of signature transaction  is only for input or outgoing transactions ??????

Tnanx !!!


if your attack addres is 1XXXX -> and you want try to find privkey -> you need outgoing transactions from attack addres

Outgoin transaction has no R,S,Z

Incoming tration has R,S, Z

Then I get. R,s,z for invoming transaction they have publick key of sender adress

F*ck.

How to get r,s,z for publick key of reciver publick key address ???

????


Title: Re: R,s,z qeschion !
Post by: COBRAS on November 14, 2021, 05:35:17 PM
I will try to explain very easy:

if address x has send transaction to y -> it means that x address has outgoing transaction.

sender address = attack addres.

So, x adress for attack or y ?


Title: Re: R,s,z qeschion !
Post by: NotATether on November 14, 2021, 07:02:19 PM
RSZ only applies to inputs, not outputs because the outputs don't have an RSZ created for them yet. They can only be made when you spend the outputs by putting them as inputs to another transaction.


Title: Re: R,s,z qeschion !
Post by: demoinvest1 on November 15, 2021, 01:27:00 AM
I read bout method use R,S,Z but not yet understand yet why it can use calculate to know privatekey
method looking R and S on Transaction How I can calculate Z? what equation for calculate
and if  I have private key how to calculate R,S,Z for testing Can do it or not?



Title: Re: R,s,z qeschion !
Post by: NotATether on November 15, 2021, 03:26:54 AM
I read bout method use R,S,Z but not yet understand yet why it can use calculate to know privatekey
method looking R and S on Transaction How I can calculate Z? what equation for calculate
and if  I have private key how to calculate R,S,Z for testing Can do it or not?

R and S are public inside the transaction output. Z is just the SHA256 hash of the raw transaction, not the signed transaction.

Usually, it is not possible to obtain the private key from an RSZ triple, since if you could, that would break the security model of Bitcoin.

But if you have two RSZ triples that were generated with the same nonce ("k"), you can solve two equations of the form s = k-1(z + r*dA) mod n (this comes from the verification algorithm) for dA, the private key.


Title: Re: R,s,z qeschion !
Post by: demoinvest1 on November 16, 2021, 02:25:32 AM

R and S are public inside the transaction output. Z is just the SHA256 hash of the raw transaction, not the signed transaction.

Usually, it is not possible to obtain the private key from an RSZ triple, since if you could, that would break the security model of Bitcoin.

But if you have two RSZ triples that were generated with the same nonce ("k"), you can solve two equations of the form s = k-1(z + r*dA) mod n (this comes from the verification algorithm) for dA, the private key.

Thank you very much. help to understand more