Bitcoin Forum
May 07, 2024, 09:17:48 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Z calculate from R, S || formula correct ???  (Read 65 times)
cassondracoffee (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 0


View Profile
May 05, 2024, 12:40:29 PM
Last edit: May 05, 2024, 12:52:04 PM by cassondracoffee
 #1

Z calculate from R, S

EXAMPLE : R S

R = 0xcabc3692f1f7ba75a8572dc5d270b35bcc00650534f6e5ecd6338e55355454d5
S = 0xf65bfc44435a91814c142a3b8ee288a9183e6a3f012b84545d1fe334ccfac25e
# target Z value for 0x9b076ad2fe6b2ce63acf4edf7fc82d5152d3c8bffb36b944da7a1cce038f544a

R = 0xcabc3692f1f7ba75a8572dc5d270b35bcc00650534f6e5ecd6338e55355454d5
S = 0x9cae782a191f3e742d9d4ff8f726d097a3a256af9fbc1faf16e7ec4d9fcf6feb
# target Z value for 0x85e43d48a83d8713a0fe253bf6b1fc70b8ee780e54749dc500f2880b056c4383

R = 0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798
S = 0xb0fc6f098d906534447438c18cd892ab2fea7b5a24b7715f46a2ece08cd281de
# target Z value for 0x373e088a93b3a987eed3d62bbe5187a42d4e7e7ef6e94885ecb06b8575da6a46

R = 0xc6047f9441ed7d6d3045406e95c07cd85c778e4b8cef3ca7abac09b95c709ee5
S = 0x70b862a9bd712fbc70e5a30152f7951f1b46d40087b83d4330ed4eb6f39d640c
# target Z value for 0x5567c62af707649e8140c5257a6e308c384d6850a4daa172ca54e887fe8fcb8f

First, we look at signatures:
Code:
s=(z+rd)/k
sk=z+rd
sk-z=rd
(sk-z)/r=d
(s/r)k-(z/r)=d
(z/r)+d=(s/r)k
k=((z/r)+d)*(r/s)

any formula to find z form r s
my idea
r/s = z Huh
s/r =z Huh
s**r=z Huh

or r s using to calculate the valid z value Huh
I HATE TABLES I HATE TABLES I HA(╯°□°)╯︵ ┻━┻ TABLES I HATE TABLES I HATE TABLES
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
Medusah
Sr. Member
****
Offline Offline

Activity: 286
Merit: 273



View Profile
May 05, 2024, 05:41:10 PM
 #2

Are these signed from the same private key d?

If you only have one pair of r and s, then you definitely can't compute z.  If you have two pairs, and k_1=k_2=k as I see from your first and second example, then you still cannot compute z_1 and z_2. 

Code:
s_1 = k^-1 * (z_1 + r * d)
s_2 = k^-1 * (z_2 + r * d)

From these equations, you only know r, s_1 and s_2.  You could determine d, if you had z and k, because it would be two unknowns (k, d) and two equations.  But, right now, you have four unknowns (k, d, z_1, z_2) and only two equations.  I don't see how you can solve it. 

█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
.
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
jacky19790729
Jr. Member
*
Online Online

Activity: 57
Merit: 8


View Profile
May 06, 2024, 11:33:12 AM
 #3

Z calculate from R, S



k   = (inv(s) * ( z + r * pvk ) ) % N
s   = (inv(k) * ( z + r * pvk)  ) % N
pvk = (inv(r) *  ( (k*s)-z )    ) % N
r * pvk = (  (k*s)-z )  % N

r , s , z, private Key , k   
All may be odd or even numbers
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!