Bitcoin Forum
May 16, 2026, 05:23:46 PM *
News: Latest Bitcoin Core release: 31.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Secp256k1 - 2 Bit Bias Solver Exercise  (Read 34 times)
vdog99 (OP)
Newbie
*
Offline

Activity: 16
Merit: 0


View Profile
May 12, 2026, 11:28:16 PM
 #1

This is just a theoretical Question and Good Exercise. I don't have a magical way to reduce the impossible amount of RAM to do this.

Hypothetically, Let Say you created a program where it is now trivial to solve for 2 Bit Nonce Bias for every Bias Type and Solve the HNP for secp256k1 curve.

How would you validate it and Test for it against the current Blockchain Data? I am aware that Post-2016 or Nonces are deterministic after RFC 6979

Example -
I understand that for 1 Bit Bias or Less the Ladder Leak Paper proves that signatures that were generated by OpenSSL 1.0.2u and 1.1.0l had 1 Bit Nonce Bias so if you had a magical solver
for 1 Bit you could recover sk but what about 2 Bit Bias?
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!