Bitcoin Forum
May 21, 2024, 07:24:06 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: signatures and the building of a lattice  (Read 53 times)
akaki (OP)
Newbie
*
Offline Offline

Activity: 22
Merit: 35


View Profile
March 03, 2023, 11:40:12 PM
 #1

Hello,

In the context of presence of biased nonces, I've read in several places that if one doesn't have enough signatures to build a lattice of the required dimension, valid ECDSA signatures should be generated for this purpose.
However, I don't understand how this can help as one will generate "i=1..n" signatures with "Ki=ai+ bi*prvkey" using random (ai, bi) that doesn't provide any informaion about Ki.

Are there any hints for properly choosing (ai, bi) ?
The most obvious one is to have the same bias of Ki (difficult to achieve) but this is not enough, right ?
ymgve2
Full Member
***
Offline Offline

Activity: 161
Merit: 230


View Profile
March 04, 2023, 01:01:58 AM
 #2

Those places are wrong, you can't build useful signatures from existing ones.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!