Bitcoin Forum
October 04, 2024, 01:31:50 AM *
News: Latest Bitcoin Core release: 27.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: 1  (Read 225 times)
ecdsa123 (OP)
Jr. Member
*
Offline Offline

Activity: 48
Merit: 105


View Profile
⇾ 1
September 25, 2022, 07:20:08 PM
Last edit: August 31, 2024, 02:56:29 PM by ecdsa123
 #1

1
NotATether
Legendary
*
Offline Offline

Activity: 1750
Merit: 7304


In memory of o_e_l_e_o


View Profile WWW
September 26, 2022, 07:26:17 AM
 #2

What is the range of the nonce used in your example, since if the nonce range is small enough (I think less than 2^248?), it is trivial to derive a solution for the private key.

NotATether
Legendary
*
Offline Offline

Activity: 1750
Merit: 7304


In memory of o_e_l_e_o


View Profile WWW
September 26, 2022, 09:50:20 AM
 #3

" if the nonce range is small enough (I think less than 2^248?), it is trivial to derive a solution for the private key"

how we can derive a solution for the private key in this example? I have no idea

I wrote some equations for the private key which you can view here. In particular, the first one which calculates the private key from r, s, and z (in the post it's called h) will be useful.

puzzleplayer
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
October 01, 2022, 05:29:24 AM
 #4


I try run this code (upper) on sagemath cell online
result is

signature matches
signature matches
False



Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!