CPosts: 6 · Reputation: 70
So here's the deal:
We got two signatures here.
d is the private key,
k is the nonce,
r is the public key,
s is the signature,
z is the hash.
The equations we have are:
d1=(k1*s1-z1)/r1
k1=(d1*r1+z1)/s1
r1=(k1*s1-z1)/d1
s1=(d1*r1+z1)/k1
z1=k1*s1-d1*r1
Now, if we have another signature, we can express it as:
d2=1/k-1
k2=1/k1
r2=(k2*s2-z2)/d2
s2=(d2*r2+z2)/k2
z2=k2*s2-d2*r2
So we know 1/k and k. How do we figure out the value of k?
CPosts: 6 · Reputation: 70
Added new information
d1=(k1*s1-z1)/r1
k1=(d1*r1+z1)/s1
r1=(k1*s1-z1)/d1
s1=(d1*r1+z1)/k1
z1=k1*s1-d1*r1
Any ideas if we have a signature another signature
d2=k1^(n-2)-1
k2=k1^(n-2)
r2=(k2*s2-z2)/d2
s2=(d2*r2+z2)/k2
z2=k2*s2-d2*r2
CPosts: 308 · Reputation: 1912
Where is the rsz value?? Give your RSZ value
r=0x
s=0x
z=0x
NiPosts: 45 · Reputation: 251
I don't understand the question here.
Are you saying k1 ie x coordinate and k2 x coordinate are inverse to each other ? or the actual nonce is inverse?
CPosts: 6 · Reputation: 70
Example:
d1=(k1*s1-z1)/r1
d1=000000000000000000000000000000000000000000000000000000000000000e (secret)
k1=(d1*r1+z1)/s1
k1=000000000000000000000000000000000000000000000000000000000000000f (secret)
r1=(k1*s1-z1)/d1
r1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e
s1=(d1*r1+z1)/k1
s1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e
z1=k1*s1-d1*r1
z1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e
Any ideas if we have a signature another signature
d2=k1^(n-2)-1
d2=22222222222222222222222222222221f6c1fb51f53ce22a19938412c66da24c (secret)
k2=k1^(n-2)
k2=22222222222222222222222222222221f6c1fb51f53ce22a19938412c66da24d (secret)
r2=(k2*s2-z2)/d2
r2=0358ff418e7a8673a4a3ed33964439ef75f0fecd3be6b2acc6e4bebb01e7eb46be
s2=(d2*r2+z2)/k2
s2=0358ff418e7a8673a4a3ed33964439ef75f0fecd3be6b2acc6e4bebb01e7eb46be
z2=k2*s2-d2*r2
z2=0358ff418e7a8673a4a3ed33964439ef75f0fecd3be6b2acc6e4bebb01e7eb46be