Bitcoin Forum
July 31, 2024, 04:23:29 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Question about a collision statement on bitcoin wiki  (Read 639 times)
SneakyNinjA (OP)
Newbie
*
Offline Offline

Activity: 21
Merit: 0


View Profile
December 09, 2013, 07:48:16 PM
 #1

Hey guys,
Was just reading https://en.bitcoin.it/wiki/Technical_background_of_version_1_Bitcoin_addresses when I came across this part.
Quote
Since Bitcoin addresses are basically random numbers, it is possible, although extremely unlikely, for two people to independently generate the same address. This is called a collision. If this happens, then both the original owner of the address and the colliding owner could spend money sent to that address. It would not be possible for the colliding person to spend the original owner's entire wallet (or vice versa).
Now it is my understanding that a collision would mean 2 different ECDSA keys turning into the same public bitcoin address, and it would therefore make sense that the ECDSA key must be the same to have actually access the entire wallet. But this stands true only if there is indeed a collision right? If two users have the same ECDSA key, then both would have access to the entire wallet, and the following statement of
Quote
If you were to intentionally try to make a collision, it would currently take 2^107 times longer to generate a colliding Bitcoin address than to generate a block
as well as the previous statement regarding collisions (as none have been found in SHA-256 to my knowledge) would really only be put there for marketing, and not for actual securities sake.
alp
Full Member
***
Offline Offline

Activity: 284
Merit: 101


View Profile
December 09, 2013, 09:21:48 PM
 #2

If two people have the same key, that's not really a collision in this sense.

It wouldn't have access to the "entire wallet", only that specific address.

Since it is only talking about collisions of different keys, I have no idea why you claim this is only marketing.  This is an important distinction for addresses, since it is "compressed" forms of large keys.  Ensuring you generate keys using good sources of entropy is an entirely different security concern, as is someone accessing your private key and using that.

I am looking for a good signature. Here could be your advertisement
Peter R
Legendary
*
Offline Offline

Activity: 1162
Merit: 1007



View Profile
December 09, 2013, 11:28:53 PM
 #3

Hey guys,
Was just reading https://en.bitcoin.it/wiki/Technical_background_of_version_1_Bitcoin_addresses when I came across this part.
Quote
Since Bitcoin addresses are basically random numbers, it is possible, although extremely unlikely, for two people to independently generate the same address. This is called a collision. If this happens, then both the original owner of the address and the colliding owner could spend money sent to that address. It would not be possible for the colliding person to spend the original owner's entire wallet (or vice versa).
Now it is my understanding that a collision would mean 2 different ECDSA keys turning into the same public bitcoin address, and it would therefore make sense that the ECDSA key must be the same to have actually access the entire wallet. But this stands true only if there is indeed a collision right? If two users have the same ECDSA key, then both would have access to the entire wallet, and the following statement of
Quote
If you were to intentionally try to make a collision, it would currently take 2^107 times longer to generate a colliding Bitcoin address than to generate a block
as well as the previous statement regarding collisions (as none have been found in SHA-256 to my knowledge) would really only be put there for marketing, and not for actual securities sake.

Bitcoin addresses are 160 bits and bitcoin ECDSA private keys are 256 bits. There are thus WAY more private keys than bitcoin addresses.  This means that there are TONS AND TONS of private keys that would all unlock the same bitcoin address.  

That being said, the odds of ever finding two keys that unlock the same address (a collision) is effectively nil.  I've seen one post that showed it would require more energy than is contained in our sun to even make a credible attempt at finding a collision.  

TL/DR: While collisions must mathematically exist, it is not physically possible to find one.  

Run Bitcoin Unlimited (www.bitcoinunlimited.info)
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!