ECDSA 1/k problem

4 replies 274 views
Posts: 6 · Reputation: 70
#1Oct 31, 2025, 06:38 PM
So here's the deal: We got two signatures here. d is the private key, k is the nonce, r is the public key, s is the signature, z is the hash. The equations we have are: d1=(k1*s1-z1)/r1 k1=(d1*r1+z1)/s1 r1=(k1*s1-z1)/d1 s1=(d1*r1+z1)/k1 z1=k1*s1-d1*r1 Now, if we have another signature, we can express it as: d2=1/k-1 k2=1/k1 r2=(k2*s2-z2)/d2 s2=(d2*r2+z2)/k2 z2=k2*s2-d2*r2 So we know 1/k and k. How do we figure out the value of k?
7 Reply Quote Share
Posts: 6 · Reputation: 70
#2Oct 31, 2025, 10:21 PM
Added new information d1=(k1*s1-z1)/r1 k1=(d1*r1+z1)/s1 r1=(k1*s1-z1)/d1 s1=(d1*r1+z1)/k1 z1=k1*s1-d1*r1 Any ideas if we have a signature another signature d2=k1^(n-2)-1 k2=k1^(n-2) r2=(k2*s2-z2)/d2 s2=(d2*r2+z2)/k2 z2=k2*s2-d2*r2
2 Reply Quote Share
cobra2013Senior Member
Posts: 308 · Reputation: 1912
#3Nov 1, 2025, 12:38 AM
Where is the rsz value?? Give your RSZ value r=0x s=0x z=0x
1 Reply Quote Share
ninj42016Full Member
Posts: 45 · Reputation: 251
#4Nov 1, 2025, 03:14 AM
I don't understand the question here. Are you saying  k1 ie x coordinate and k2 x coordinate are inverse to each other ? or the actual nonce is inverse?
1 Reply Quote Share
Posts: 6 · Reputation: 70
#5Nov 1, 2025, 09:27 AM
Example: d1=(k1*s1-z1)/r1 d1=000000000000000000000000000000000000000000000000000000000000000e (secret) k1=(d1*r1+z1)/s1 k1=000000000000000000000000000000000000000000000000000000000000000f (secret) r1=(k1*s1-z1)/d1 r1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e s1=(d1*r1+z1)/k1 s1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e z1=k1*s1-d1*r1 z1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e Any ideas if we have a signature another signature d2=k1^(n-2)-1 d2=22222222222222222222222222222221f6c1fb51f53ce22a19938412c66da24c (secret) k2=k1^(n-2) k2=22222222222222222222222222222221f6c1fb51f53ce22a19938412c66da24d (secret) r2=(k2*s2-z2)/d2 r2=0358ff418e7a8673a4a3ed33964439ef75f0fecd3be6b2acc6e4bebb01e7eb46be s2=(d2*r2+z2)/k2 s2=0358ff418e7a8673a4a3ed33964439ef75f0fecd3be6b2acc6e4bebb01e7eb46be z2=k2*s2-d2*r2 z2=0358ff418e7a8673a4a3ed33964439ef75f0fecd3be6b2acc6e4bebb01e7eb46be
4 Reply Quote Share

Related topics