Bitcoin Forum
December 17, 2017, 08:19:34 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Public Key + Half Private Key...  (Read 1125 times)
bncbnc
Hero Member
*****
Offline Offline

Activity: 588



View Profile
April 13, 2013, 06:36:02 AM
 #1

My question is, knowing this much information, is it possible to somehow calculate the remaining portion of the private key? Or is it just as impossible as stumbling on the same private key when I generate a new address?

Thanks!

1513541974
Hero Member
*
Offline Offline

Posts: 1513541974

View Profile Personal Message (Offline)

Ignore
1513541974
Reply with quote  #2

1513541974
Report to moderator
1513541974
Hero Member
*
Offline Offline

Posts: 1513541974

View Profile Personal Message (Offline)

Ignore
1513541974
Reply with quote  #2

1513541974
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1513541974
Hero Member
*
Offline Offline

Posts: 1513541974

View Profile Personal Message (Offline)

Ignore
1513541974
Reply with quote  #2

1513541974
Report to moderator
1513541974
Hero Member
*
Offline Offline

Posts: 1513541974

View Profile Personal Message (Offline)

Ignore
1513541974
Reply with quote  #2

1513541974
Report to moderator
Shirik
Jr. Member
*
Offline Offline

Activity: 32


View Profile
April 13, 2013, 07:28:23 AM
 #2

Well, from a brute force perspective, they have far less options to try now. Effectively you've reduced your key down to a much lower size.

That being said, effectively what you're asking is "What is 25 + 25" and you gave the answer 5. It doesn't really get you any closer than the actual answer 50, it's just wrong.

That being said, I'm not a math or cryptography major, and there might be some crazy hypermath (that is now officially a word) that you can do to reduce the set of possible private keys down to something managable, but it's at least not something obvious.

That being said, this is interesting (for RSA):

"Exposing an RSA Private Key Given a Small Fraction of its Bits"

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=2&ved=0CD0QFjAB&url=http%3A%2F%2Ftheory.stanford.edu%2F~gdurf%2Fpubs%2Fexposure.ps&ei=5AlpUa7_LOqligLGg4DoAw&usg=AFQjCNHVIFD6aik02UgaWsmbdiB0EpcgLw&sig2=6OCJzdX3GDcNaSbQ2DBXRg
Stephen Gornick
Legendary
*
Offline Offline

Activity: 2338


✪ NEXCHANGE | BTC, LTC, ETH & DOGE ✪


View Profile
April 13, 2013, 07:41:37 AM
 #3

I am just wondering if this is possible to do on the ECDSA generated key pairs for bitcoin. It would be a new interesting way to store paper wallets, that would require you to bruteforce the last half of your own key

From another thread:

You don't want to cut the key in half.  There are lots of complicated ways to share secrets (some even involving redundancy i.e 3 of 5 key fragments needed to rebuild key) but the simplest way is an XOR.

http://en.wikipedia.org/wiki/Secret_sharing

or:

pybtcsplit - m-of-n Private Key Splitting made easy in one simple python utility
 - http://bitcointalk.org/index.php?topic=104086.0

tiktoc
Full Member
***
Offline Offline

Activity: 173


View Profile
April 14, 2013, 11:06:01 AM
 #4

Have a search for cassicus's coin key generator can use seeds and pre generated pass phrases.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!