|
Title: Nonce k k+1 Post by: Bglhn on March 19, 2024, 12:39:54 PM Hello friends. I have two RSZ values obtained from the transfer of a bitcoin address and I want to find the nonce/private key. I do not write the values for confidentiality reasons, but I give approximate values as an example. k can be k+1. I'm sure there are many people here who can figure this out, but I can't. Any python code formulas etc that can help me? is there? I need your ideas.
R1 = 00a61d1110016763ed34995c319a42ea81b96a593efb29a4a46880bd8fe955077f S1=009a72c80ae72e6edbe93d96d0202cc73bdf4ed1630c23381b2891e2427393878 Z1=306801f94f8bed2d753a66c60a614f359ff94758937bc7f950a9865d33ce1092 R2 = 00a6f4e7382a1c878a740e113c313779bcaa2dc20af5c1ff6c2bb7011cfb278c0d S2=009cbddcba33bd30b4caad188ab02552e68b74fd43946e5b5a7f593dd367a26d28 Z2=9c76db1673ded5f0028abe36ad3b47bc47973681530481a32e1e7dd2f66ba0fd The values are here, R1-R2 and S1-S2 are close to each other. I don't know how to make the connection. And of course how to calculate this correctly. I would be grateful if you help. Title: Re: Nonce k k+1 Post by: Amphenomenon on March 19, 2024, 12:49:50 PM I don't know much about Nonce but I guessed this thread will be helpful Nonce k and k +1 (ECDSA SIGNATURE) (https://bitcointalk.org/index.php?topic=5317743.msg56365619#msg56365619)
Title: Re: Nonce k k+1 Post by: Bglhn on March 19, 2024, 01:28:46 PM Thank you very much, I will check it out right away
Title: Re: Nonce k k+1 Post by: stilichovandal on March 22, 2024, 06:31:28 PM If R1 and R2 are close to each other, it does not mean k and K+1 are used.
Title: Re: Nonce k k+1 Post by: Bglhn on March 22, 2024, 11:23:47 PM So is there any way to understand this?
Title: Re: Nonce k k+1 Post by: stilichovandal on March 23, 2024, 05:49:01 PM Let's see it with an example,
R = k * G mod N Where k is the random number, G is the Gen point, and N is the order of the curve. If I take k randomly = 633cbe3ec02b9401c5effa144c5b4d22f87940259634858fc7e59b1c09937852 k* G = 02e9d4436e5e57ac598594faf9a04b8edc69a04096863ef4bd5a27dfcdc8c89fed (compressed) k+1 * G = 0313e264d56097d32b38e23c6218b951ed02a684dccee5036388df1e6b94b5417a The difference between them is enormous. I don't know numbers that generate consecutive public keys with slight differences. When you say slight difference, how small is it? Do you have a range? Title: Re: Nonce k k+1 Post by: Bglhn on March 23, 2024, 06:31:18 PM I don't actually have any range. It looked small to me.
So do you know a way to understand the relationship between two nonces? Title: Re: Nonce k k+1 Post by: stilichovandal on March 23, 2024, 07:34:11 PM I don't actually have any range. It looked small to me. So do you know a way to understand the relationship between two nonces? If there were an easy way to find the relationship between 2 nonces, it would break the ECDSA. |