dave42

Most nonce or k values ​​are greater than 2^250 ~ 2^256 Take the 5 r,s,z examples from puzzle #65 secret: 0x000000000000000000000000000000000000000000000001a838b13505b26867 k1 =…

Pubkey = 02ceb6cbbcdbdf5ef7150682150f4ce2c6f4807b349827dcdbdd1f2efa885a2630 puzzle #120 --- k1 = 0x00000000000000000000000000000000025d46d0bccbc08eafa03912b3f2c206 r1 =…

Do you mean this announcement from Telegram ttdsales #66 ---- I have been doing a deep dive into the range submissions from the user kafeitianshi. He ran very hard for a couple of months but I have never been in…

Only the puzzle creator knows the private key #66 and can do this, but I don't think he would be so boring to do it

k = (inv(s) * ( z + r * pvk ) ) % N s = (inv(k) * ( z + r * pvk) ) % N pvk = (inv(r) * ( (k*s)-z ) ) % N r * pvk = ( (k*s)-z ) % N r , s , z, private Key , k All may be odd or even numbers

Try it Example, find signing secret. https://rawcdn.githack.com/nlitsme/bitcoinexplainer/aa50e86e8c72c04a7986f5f7c43bc2f98df94107/ecdsacrack.html My RSZ, K , Private Key is correct

r from k , not X coodinate of publickbkey with private key find k must know rsz + private key pvk = (inv(r) * ( (k*s)-z ) ) % N k = (inv(s) * ( z + r * pvk ) ) % N s = (inv(k) * ( z + r * pvk) ) % N r = (inv(pvk) * ((k…

Recovered Bitcoin public key: 0240f08294791bb07e908196847f79ad162ba0dff28eb312b1669ee2c8a72f7bfb Bitcoin Address： 1AaEnbgVCKmG7RM8KYxjiQ2xaqn4NmyA7a r1 = 0x7029db68c1420fe2d41c1fd7b86ea0739bc8e6d0a7c58f754b93e5ff6c8040…

Recovered Bitcoin public key: 023e42b3151f310f5f417f11b4c32d8360b22109dcc6432339243332b56cd596de Bitcoin Address： 1ak61eAXk4bxNbovZuqh4f1PxBaf1VUBV r=0x678afdb0fe5548271967f1a67130b7105cd6a828e03909a67962e0ea1f61deb6…

output: HA: e809a06f968e72e232e96f55e26f809d22d922681acca6904f12c4ba1b53018d r1 = 0xd7232c0eed9a80a6e53d74b57d80cd892816b46c69157f8e543ee76dc21f8410 s1 =…

no....bruteforce nonce k , that is impossible It's seem use 1 rsz convert to 2 rsz even know that k2 = k1 + 1 I still can't recovery private key

sorry......I can't recovery private key for this 2 rsz my result: k1 = 0 k2 = 1 Recovered Bitcoin public key: 028629507d9eef1748ec67ca2c4ab641fa0951d7f0bb0cf226f1c0f465a4e29404 Bitcoin Address：…

I had edit my post ~~ fix it #130 public key 0x633cbe3ec02b9401c5effa144c5b4d22f87940259634858fc7e59b1c09937852, 0xb078a17cc1558a9a4fa0b406f194c9a2b71d9a61424b533ceefe27408b3191e3 and Provide 5 sets of my own generated…

the same r value , we can recovery private key ........ but we are interested in recovering the private key of #puzzle 130 from a large set of r s z and public key ... But we need to know the bits of k ， from every set…

https://bitcointalk.org/index.php?topic=5394249.100 read it ....... garlonicon share his source code Even if I have 100,000 puzzle #130 r , s, z I still can't use lattice-attack crack ....Because the generated rsz and k…

I have been learning about ECDSA ( r s z, public key ,private key ) for about 2 months # 130 Although only 1 rsz is known , but 1000 rsz can be produced using the public key, the nonce K value will be 240~256 bits 50% -…

If you have only one signatures I think the same difficulty as Puzzle #136 but with public key had known

use Google .......so I find 2 private key from his 2 rsz 1: D:\python\bitcoin_rsz>python getz_input.py -txid a37f2f87bd371d621178605a79062010298c31fc884ed966a2041684eb8198f1 Starting Program...…

These 2 sets of r,s,z use different public keys...the private keys must also be different.. 1: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd036413e 2:…

=== my test results === 252 ( leak 4 bit ) ===> 70 rsz Success ( Time: 8 seconds ) 253 ( leak 3 bit ) ===> 155 rsz Success (Time: 661 seconds ) 254 ( leak 2 bit ) ===> 200~1500+ rsz Never Recovery my Private Key 255 (…