R,s,z qeschion !

[COBRAS]

R,s,z of signature transaction  is only for input or outgoing transactions

Tnanx !!!

[COBRAS]

R,s,z of signature transaction  is only for input or outgoing transactions

Tnanx !!!

if your attack addres is 1XXXX -> and you want try to find privkey -> you need outgoing transactions from attack addres

Outgoin transaction has no R,S,Z

Incoming tration has R,S, Z

Then I get. R,s,z for invoming transaction they have publick key of sender adress

F*ck.

How to get r,s,z for publick key of reciver publick key address

?

[COBRAS]

I will try to explain very easy:

if address x has send transaction to y -> it means that x address has outgoing transaction.

sender address = attack addres.

So, x adress for attack or y ?

[NotATether]

RSZ only applies to inputs, not outputs because the outputs don't have an RSZ created for them yet. They can only be made when you spend the outputs by putting them as inputs to another transaction.

[demoinvest1]

I read bout method use R,S,Z but not yet understand yet why it can use calculate to know privatekey
method looking R and S on Transaction How I can calculate Z? what equation for calculate
and if  I have private key how to calculate R,S,Z for testing Can do it or not?

[NotATether]

I read bout method use R,S,Z but not yet understand yet why it can use calculate to know privatekey
method looking R and S on Transaction How I can calculate Z? what equation for calculate
and if  I have private key how to calculate R,S,Z for testing Can do it or not?

R and S are public inside the transaction output. Z is just the SHA256 hash of the raw transaction, not the signed transaction.

Usually, it is not possible to obtain the private key from an RSZ triple, since if you could, that would break the security model of Bitcoin.

But if you have two RSZ triples that were generated with the same nonce ("k"), you can solve two equations of the form s = k^-1(z + r*dA) mod n (this comes from the verification algorithm) for dA, the private key.

[demoinvest1]

R and S are public inside the transaction output. Z is just the SHA256 hash of the raw transaction, not the signed transaction.

Usually, it is not possible to obtain the private key from an RSZ triple, since if you could, that would break the security model of Bitcoin.

But if you have two RSZ triples that were generated with the same nonce ("k"), you can solve two equations of the form s = k^-1(z + r*dA) mod n (this comes from the verification algorithm) for dA, the private key.

Thank you very much. help to understand more