Author

Topic: is there another way to calc for S ? (Read 121 times)

jr. member
Activity: 51
Merit: 107
November 25, 2023, 08:05:55 AM
#3
This is wrong question - not how to calculate "S" but how to calculate message hash if you have r and s:)
member
Activity: 74
Merit: 86
November 14, 2023, 12:58:59 AM
#2
Quote
and remove X if applicable
Duh, you mean x=1? You want to remove it? Then, just do that. Which means, if you want to replace "x*rr" with "rr", then the conclusion is simply that "x=1".

Seriously: if there would be a way, that would mean ECDSA would be broken. So, your question could be simplified into "is there another way to break ECDSA?".

And the answer is also obvious: if there is no way, then nobody will tell you, how to do it. But if there is a way, then anyone, who will know the answer, will simply hide it. The incentive is just too big.

Which means, in both cases, the answer is "no, you cannot do that".
member
Activity: 107
Merit: 10
if you want to lie *cough*use your data; not mine.
November 13, 2023, 09:48:27 PM
#1
Hey,

Just wondering if there is another way to calc for S and rewrite this and remove X if applicable

s1=(((x*rr)+z1)%N)

Thanks
Jump to: