MoonShadow (OP)
Legendary
 Offline
Activity: 1708
Merit: 1007
|
 |
August 23, 2010, 09:25:12 PM |
|
Can someone please explain to me, in lay terms, how a client can verify that a given transaction is an honest one? The address is a hash of a public key, and the transaction must be signed with the matching private key; but how does a client check that the signed transaction actually matches the sender's address without the public key? Or are the public keys made public at some point in the chain?
|
"The powers of financial capitalism had another far-reaching aim, nothing less than to create a world system of financial control in private hands able to dominate the political system of each country and the economy of the world as a whole. This system was to be controlled in a feudalist fashion by the central banks of the world acting in concert, by secret agreements arrived at in frequent meetings and conferences. The apex of the systems was to be the Bank for International Settlements in Basel, Switzerland, a private bank owned and controlled by the world's central banks which were themselves private corporations. Each central bank...sought to dominate its government by its ability to control Treasury loans, to manipulate foreign exchanges, to influence the level of economic activity in the country, and to influence cooperative politicians by subsequent economic rewards in the business world."
- Carroll Quigley, CFR member, mentor to Bill Clinton, from 'Tragedy And Hope'
|
|
|
|
|
|
|
|
|
|
|
|
The forum was founded in 2009 by Satoshi and Sirius. It replaced a
SourceForge forum.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
Insti
Sr. Member
Offline
Activity: 294
Merit: 252
Firstbits: 1duzy
|
|
August 23, 2010, 09:32:47 PM |
|
The public key/Address is made public when it gets coins put into it.
Either by:
a) Coins "falling out of the sky" as a block generation reward.
or
b) it appearing as an output (TxOut) of a previous transaction.
So when you want to check a transaction. You make sure:
a) The Address has the right amount of coins in it. (Because you've seen it before as a TxOut.)
b) The transaction has been signed with the private key. (So you know it's the owner spending it.)
Edit: Added transaction checking info
|
|
|
|
|
MoonShadow (OP)
Legendary
Offline
Activity: 1708
Merit: 1007
|
|
August 23, 2010, 09:35:21 PM |
|
The public key/Address is made public when it gets coins put into it.
Are you saying that the public key *is* the address? My prior understanding was that the address was a hash of the public key. |
"The powers of financial capitalism had another far-reaching aim, nothing less than to create a world system of financial control in private hands able to dominate the political system of each country and the economy of the world as a whole. This system was to be controlled in a feudalist fashion by the central banks of the world acting in concert, by secret agreements arrived at in frequent meetings and conferences. The apex of the systems was to be the Bank for International Settlements in Basel, Switzerland, a private bank owned and controlled by the world's central banks which were themselves private corporations. Each central bank...sought to dominate its government by its ability to control Treasury loans, to manipulate foreign exchanges, to influence the level of economic activity in the country, and to influence cooperative politicians by subsequent economic rewards in the business world."
- Carroll Quigley, CFR member, mentor to Bill Clinton, from 'Tragedy And Hope'
|
|
|
Insti
Sr. Member
Offline
Activity: 294
Merit: 252
Firstbits: 1duzy
|
|
August 23, 2010, 09:36:05 PM |
|
Are you saying that the public key *is* the address? My prior understanding was that the address was a hash of the public key.
Does it matter? |
|
|
|
|
MoonShadow (OP)
Legendary
Offline
Activity: 1708
Merit: 1007
|
|
August 23, 2010, 09:52:57 PM |
|
Are you saying that the public key *is* the address? My prior understanding was that the address was a hash of the public key.
Does it matter? Yes, it does. What I'm actually asking is this... What prevents a hacked client from submitting a transaction that falsely claims an existing address with a balance, and signs it with any private key? How do the clients verify that the signature and the address actually belong together? If the address is the private key, I can understand how this is easily verified; since that is the point of public key encryption. However, if the address is a hash of the public key, and not the public key itself, how do the clients aquire the public key in order to check the signature? How do they check the hash that is the address against that public key to verify that they go together? |
"The powers of financial capitalism had another far-reaching aim, nothing less than to create a world system of financial control in private hands able to dominate the political system of each country and the economy of the world as a whole. This system was to be controlled in a feudalist fashion by the central banks of the world acting in concert, by secret agreements arrived at in frequent meetings and conferences. The apex of the systems was to be the Bank for International Settlements in Basel, Switzerland, a private bank owned and controlled by the world's central banks which were themselves private corporations. Each central bank...sought to dominate its government by its ability to control Treasury loans, to manipulate foreign exchanges, to influence the level of economic activity in the country, and to influence cooperative politicians by subsequent economic rewards in the business world."
- Carroll Quigley, CFR member, mentor to Bill Clinton, from 'Tragedy And Hope'
|
|
|
Insti
Sr. Member
Offline
Activity: 294
Merit: 252
Firstbits: 1duzy
|
|
August 23, 2010, 10:22:58 PM |
|
Not sure how far from 'lay' this is straying..
The public key is a 160 bit number.
The Bitcoin Address *is* the public key. (+ version + checksum + encoding, which all get stripped off when you just need the key.)
Transaction signing is done using Elliptical Curve Cryptography.
|
|
|
|
|
MoonShadow (OP)
Legendary
Offline
Activity: 1708
Merit: 1007
|
|
August 23, 2010, 10:44:42 PM |
|
Not sure how far from 'lay' this is straying..
The public key is a 160 bit number.
The Bitcoin Address *is* the public key. (+ version + checksum + encoding, which all get stripped off when you just need the key.)
Transaction signing is done using Elliptical Curve Cryptography.
Okay, thanks. |
"The powers of financial capitalism had another far-reaching aim, nothing less than to create a world system of financial control in private hands able to dominate the political system of each country and the economy of the world as a whole. This system was to be controlled in a feudalist fashion by the central banks of the world acting in concert, by secret agreements arrived at in frequent meetings and conferences. The apex of the systems was to be the Bank for International Settlements in Basel, Switzerland, a private bank owned and controlled by the world's central banks which were themselves private corporations. Each central bank...sought to dominate its government by its ability to control Treasury loans, to manipulate foreign exchanges, to influence the level of economic activity in the country, and to influence cooperative politicians by subsequent economic rewards in the business world."
- Carroll Quigley, CFR member, mentor to Bill Clinton, from 'Tragedy And Hope'
|
|
|
Insti
Sr. Member
Offline
Activity: 294
Merit: 252
Firstbits: 1duzy
|
|
August 23, 2010, 10:48:28 PM |
|
I've been doing some more research, and I suspect the above is probably not 100% correct.
There does seem to be a difference between the actual public key and its hash, and where each is used.
What I am sure of:
Transaction signing is done using Elliptical Curve Cryptography.
The Bitcoin Address contains enough information to verify that the transaction has been signed correctly.
|
|
|
|
|
theymos
Administrator
Legendary
Offline
Activity: 5194
Merit: 12982
|
|
August 24, 2010, 05:12:22 AM |
|
You usually send bitcoins to a hash of a public key (the Bitcoin address). When the receiver spends those coins, they include their full public key. To verify, you check to see if the hash of the full public key is equal to the hash that the bitcoins were sent to.
It's also possible to send bitcoins to the full public key from the start. This is done in transfers to IP addresses and transfers to yourself.
|
1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
|
|
|
|
Red
|
|
August 24, 2010, 06:10:42 AM |
|
Ok, so there is nothing much to add to what theymos said...
Except, that on most "digital signatures" the full certificate including the public key is included in the signature block. Otherwise they are hard to validate because there is nothing to map the seemingly random signature part to any particular person's public key.
Since bitcoin doesn't use certificates, (I think) they add the signature and public key as a separate fields in the transaction.
|
|
|
|
|
|
