bluemeanie1
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 07:28:48 PM Last edit: December 23, 2013, 10:18:55 PM by bluemeanie1 |
|
I tried to supply more detail for my post last night, but literally moments after I mentioned Elliptic Curve Cryptography and Wiles' Proof Of Fermat's Last Theorem, bitcointalk.org went down. Later that night, my website was hacked by a fairly sophisticated hacker. Anyway, let me establish a few things. At this point in history it's fairly clear and obvious that NSA et al. are sabotaging not only our cryptographic technology, but our KNOWLEDGE OF CRYPTOGRAPHY. I don't see it as a coincidence that just years after a very talented mathematician spends at least 5 years exploring the arcane properties of elliptic curves, suddenly, Elliptic Curves become fully accepted methods for cryptography for public use. I've suggested some months ago that the NSA sabotages our cryptography and most on here thought the idea was ridiculous, today there is PROOF they are doing just that. For starters most people on here really don't know much about this subject and there is quite a bit of posturing going on. It's an open forum so that's to be expected. People pretending to correct other people, while making no useful input to the conversation and posting links of which they don't even understand the content. Even this thread is riddled with math mistakes that these people posing as experts seem to miss. For example: Well, the point must lie on the curve, so it must satisfy y2 = x3 + 7 (mod p).
this equation is wrong and doesn't even work for the point G on the Elliptic Curve. Gy 2 = 3032293323238629131397093708741358902059848828670291900490749632219017966501037 851199852273530008094362088328117359813331037184493212192641774435470977600Gx 3 +7 mod p = 28522264212469271830151728101663411104844712793013968865831688505076558508754no one is checking anything, most on here are just chattering away on subjects to look knowledgeable. If anyone on here knew about EC math(there are few), they would have pointed out that to express the equation over field ![](https://ip.bitcointalk.org/?u=http%3A%2F%2Fupload.wikimedia.org%2Fmath%2F0%2Fb%2F1%2F0b100eeff3848a15dbb46291e7fe52ad.png&t=665&c=lgIFD8zcRo8f7A) (integers) for instance the equation is: y = ( x 3 + 7 ) (1/2) (mod p) having established that... the fact is if you followed the progression of events it was indeed highly suspect. If you review the Fermat Proof you will see that there are people who can process elliptic curves in ways that make just about anything that has ever been discussed on here look pedestrian by comparison. If you want to understand how the Fermat Proof works, you can start by studying the works of Galois. http://en.wikipedia.org/wiki/Galois , as well as mastering half a dozen higher order math concepts: cover and lift, finite field, isomorphism, surjective function, decomposition group, j-invariant of elliptic curves, Abelian group, Grossencharacter, L-function, abelian variety, Jacobian, Néron model, Gorenstein ring, Torsion subgroup (including torsion points on elliptic curves here[20] and here[21]), Congruence subgroup, eigenform, Character (mathematics), Irreducibility (mathematics), Image (mathematics), dihedral, Conductor, Lattice (group), Cyclotomic field, Cyclotomic character, Splitting of prime ideals in Galois extensions (and decomposition group and inertia group), Quotient space, Quotient group , meanwhile people on here are claiming all these things are simple, but not offering any useful pointers on all the things the people in this very thread got wrong so far. In other words- useless nerd. Part of what the NSA et. al. have been doing for some time is making our crypto algorithms APPEAR simpler than they are. I sometimes suspect that this Bruce Schneier job. As I have established, the theory of elliptic curves is very deep and very complex, but rarely do you ever hear any of these ideas applied to our crypto systems. Once in a while they pop up and the 'experts' pretend as if this is some surprising event that came out of left field. For quite some time, our spying agencies have sequestered mathematicians, pay them and gag them to create this kind of fog of understanding around whatever math we use to hide our information. This tradition goes back at least to Alan Turing.
|
|
|
|
|
BurtW
Legendary
Offline
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 08:52:31 PM Last edit: December 23, 2013, 10:50:11 PM by BurtW |
|
Maybe you did not realize that:
y2 = x3 + 7 (mod p).
is shorthand for:
y2 (mod p) = x3 + 7 (mod p)
because knowing that your correct equation:
y = ( x3 + 7 ) (1/2) (mod p)
is identical to the equation you corrected.
|
Our family was terrorized by Homeland Security. Read all about it here: http://www.jmwagner.com/ and http://www.burtw.com/ Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
|
|
|
bluemeanie1
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 09:07:08 PM |
|
Maybe you did not realize that:
y2 = x3 + 7 (mod p).
is shorthand for:
y2 (mod p) = x3 + 7 (mod p)
because knowing that your correct equation:
y = ( x3 + 7 ) (1/2) (mod p)
is identical to the equation you corrected.
on what planet would that be?
|
|
|
|
jackjack
Legendary
Offline
Activity: 1176
Merit: 1257
May Bitcoin be touched by his Noodly Appendage
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 09:40:19 PM |
|
Maybe you did not realize that:
y2 = x3 + 7 (mod p).
is shorthand for:
y2 (mod p) = x3 + 7 (mod p)
because knowing that your correct equation:
y = ( x3 + 7 ) (1/2) (mod p)
is identical to the equation you corrected.
on what planet would that be? Tell me you're trolling
|
Own address: 19QkqAza7BHFTuoz9N8UQkryP4E9jHo4N3 - Pywallet support: 1AQDfx22pKGgXnUZFL1e4UKos3QqvRzNh5 - Bitcointalk++ script support: 1Pxeccscj1ygseTdSV1qUqQCanp2B2NMM2 Pywallet: instructions. Encrypted wallet support, export/import keys/addresses, backup wallets, export/import CSV data from/into wallet, merge wallets, delete/import addresses and transactions, recover altcoins sent to bitcoin addresses, sign/verify messages and files with Bitcoin addresses, recover deleted wallets, etc.
|
|
|
marcus_of_augustus
Legendary
Offline
Activity: 3920
Merit: 2349
Eadem mutata resurgo
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 09:48:57 PM |
|
He has history ... and seriously guys please keep the pissing contests to the other sections of the forum.
Need I remind you this is a "Development and Technical Discussion" topic, we have enough crap to wade through elsewhere.
|
|
|
|
rarkenin
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 09:51:19 PM |
|
On this planet. The design of ECC revolves around age-old mathematical definitions and theorems with that kind of shorthand, so accept it here.
|
|
|
|
withnail
Newbie
Offline
Activity: 12
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:12:28 PM |
|
Maybe you did not realize that:
y2 = x3 + 7 (mod p).
is shorthand for:
y2 (mod p) = x3 + 7 (mod p)
because knowing that your correct equation:
y = ( x3 + 7 ) (1/2) (mod p)
is identical to the equation you corrected.
on what planet would that be? I don't know which part the rhetorical question refers to. If it is about the notation then indeed it is standard. If it is about the square root part, then in principle it is OK, although one needs to note that not every element in a finite field is a square (after all this is what Gauss' quadratic reciprocity law is all about) and hence one would implicitly agree that the equation is meaningful if and only if the righthand side is defined. This in math literature is called "abuse of notation". The list of "advanced math topics" you listed above, well, they are all very advanced for high school kids, but only half of them are advanced in any sense for a math major, and none of them should be advanced for a math graduate. Of course a topic like L-functions really emcompasses a large area of research and is still ongoing, so some part of it is really advanced. For instance, you favorite Fermat's last theorem is not really considered very advanced anymore these days, but things related to the BSD conjecture (google it) is very advanced even for professionals. You know I am a professional, don't you?
|
|
|
|
bluemeanie1
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:13:36 PM |
|
On this planet. The design of ECC revolves around age-old mathematical definitions and theorems with that kind of shorthand, so accept it here.
if Maybe you did not realize that:
y2 = x3 + 7 (mod p).
is shorthand for:
y2 (mod p) = x3 + 7 (mod p)
how do I say y 2 = x 3 + 7 (mod p)? in this idiotic language this person just made up that is understood by precisely one person? have fun kids, the adults can't spend all day playing around on the internet. have a nice day.
|
|
|
|
withnail
Newbie
Offline
Activity: 12
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:21:12 PM |
|
I did not read through all the craps above, but why are people talking about elliptic curves? SHA-256 is not based on elliptic curve cryptography, it is simple prime factorisation cryptography, am I mistaken?
|
|
|
|
bluemeanie1
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:23:00 PM |
|
I did not read through all the craps above, but why are people talking about elliptic curves? SHA-256 is not based on elliptic curve cryptography, it is simple prime factorisation cryptography, am I mistaken?
might have something to do with the title of this thread: "NSA and ECC". ECC stands for Elliptic Curve Cryptography.
|
|
|
|
rarkenin
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:26:17 PM |
|
I did not read through all the craps above, but why are people talking about elliptic curves? SHA-256 is not based on elliptic curve cryptography, it is simple prime factorisation cryptography, am I mistaken?
Neither really. ECC is indeed based on elliptic curves. It's used to sign transactions in the bitcoin blockchain. SHA is not prime factorization. That's RSA, just about. SHA is its own little thing, based on AFAIK a Merkle-Damgard construction.
|
|
|
|
withnail
Newbie
Offline
Activity: 12
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:35:41 PM |
|
I did not read through all the craps above, but why are people talking about elliptic curves? SHA-256 is not based on elliptic curve cryptography, it is simple prime factorisation cryptography, am I mistaken?
Neither really. ECC is indeed based on elliptic curves. It's used to sign transactions in the bitcoin blockchain. SHA is not prime factorization. That's RSA, just about. SHA is its own little thing, based on AFAIK a Merkle-Damgard construction. yeah? I am a newbie when it comes to the inner workings of the bitcoin code, but I am a bit concerned since NIST standard for pseudo-random number generation based on ECC is compromised. Perhaps bitcoin uses an unadulterated version?
|
|
|
|
rarkenin
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:39:05 PM |
|
AFAIK Bitcoin is unadulterated.
|
|
|
|
bluemeanie1
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:55:35 PM |
|
Oh ok. Do you reckon there is any need to switch bitcoin over to Ed25519 at the moment? Or do you trust the magic numbers in Secp256k1?
If it's possible for any of these ECC systems to be intentionally insecure that would require some profound math which is unknown to the public. If we assume the existence of profound math which is unknown to the public, I do not see a reason to also assume Ed25519 is more secure. Including it would be a significant burden (a fast ecc signature validation implementation is not simple code, and would not overlap with our existing code) which would carry its own risks. this is an example of what I'm talking about. this 'profound math unknown to the public' does exist! Just look at the Fermat Proof. It shows that there is an extensive field of knowledge about elliptic curves(developed just a few years before the ECC came into widespread use). Granted, more people today know these things, but even now it is considered arcane knowledge. As a matter of fact, much of the Fermat Proof deals exactly with the area of theory that ECC resides. Are these things pure coincidences? My point being, it is very possible that the NSA has secret knowledge of elliptic curves.
|
|
|
|
BurtW
Legendary
Offline
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 10:57:44 PM |
|
My point being, it is very possible that the NSA has secret knowledge of elliptic curves.
It is also possible they do not, right?
|
Our family was terrorized by Homeland Security. Read all about it here: http://www.jmwagner.com/ and http://www.burtw.com/ Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
|
|
|
jackjack
Legendary
Offline
Activity: 1176
Merit: 1257
May Bitcoin be touched by his Noodly Appendage
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 11:04:16 PM |
|
On this planet. The design of ECC revolves around age-old mathematical definitions and theorems with that kind of shorthand, so accept it here.
if Maybe you did not realize that:
y2 = x3 + 7 (mod p).
is shorthand for:
y2 (mod p) = x3 + 7 (mod p)
how do I say y 2 = x 3 + 7 (mod p)? in this idiotic language this person just made up that is understood by precisely one person?Only 100% of mathematicians use that notation You should track them down to make them learn your notation have fun kids, the adults can't spend all day playing around on the internet. have a nice day.
Yeah let the kids play together and never come back
|
Own address: 19QkqAza7BHFTuoz9N8UQkryP4E9jHo4N3 - Pywallet support: 1AQDfx22pKGgXnUZFL1e4UKos3QqvRzNh5 - Bitcointalk++ script support: 1Pxeccscj1ygseTdSV1qUqQCanp2B2NMM2 Pywallet: instructions. Encrypted wallet support, export/import keys/addresses, backup wallets, export/import CSV data from/into wallet, merge wallets, delete/import addresses and transactions, recover altcoins sent to bitcoin addresses, sign/verify messages and files with Bitcoin addresses, recover deleted wallets, etc.
|
|
|
rarkenin
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 23, 2013, 11:07:55 PM |
|
You just can't take modulo on one side since that's not fundamentally following from theorems and not going to lead you anywhere. The (mod 9) annotation applies to the entire line, putting it into modular arithmetic. It looks like you screwed up and now hate us all for your own stupidity.
|
|
|
|
NewLiberty
Legendary
Offline
Activity: 1204
Merit: 1002
Gresham's Lawyer
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 26, 2013, 09:33:04 PM |
|
I did not read through all the craps above, but why are people talking about elliptic curves? SHA-256 is not based on elliptic curve cryptography, it is simple prime factorisation cryptography, am I mistaken?
Neither really. ECC is indeed based on elliptic curves. It's used to sign transactions in the bitcoin blockchain. SHA is not prime factorization. That's RSA, just about. SHA is its own little thing, based on AFAIK a Merkle-Damgard construction. yeah? I am a newbie when it comes to the inner workings of the bitcoin code, but I am a bit concerned since NIST standard for pseudo-random number generation based on ECC is compromised. Perhaps bitcoin uses an unadulterated version? Read this whole thread. It isn't that long and will give you answers, even as a newbie.
|
|
|
|
justusranvier
Legendary
Offline
Activity: 1400
Merit: 1013
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 21, 2014, 06:30:18 PM |
|
For the sake of completeness I'd like to point out that: John Goyo recalls that two former employees generated the domain parameters. In no way implies: In particular, no external organization, including any that some now asperse with backdoor insertion, generated the parameters. It's not possible to prove that an employee of a given organization is not also an employee of a different organization. The latter statement might be true, but we'll never know since it's unfalsifiable.
|
|
|
|
|