Author

Topic: Maleability testing? (Read 1099 times)

jr. member
Activity: 38
Merit: 18
August 29, 2017, 07:56:24 AM
#10
You could look at the malleability integration test in the Core repo:

https://github.com/bitcoin/bitcoin/blob/master/test/functional/txn_clone.py

sr. member
Activity: 770
Merit: 305
August 29, 2017, 05:18:14 AM
#9
come to mention it, perhaps that's all that is required? 
I could just sign two identical transactions and issue them at the same time?
This case is not a "true" malleability.
You always can create two transactions spending funds to two different destinations.
And only one will be confirmed.
Usually we care about Man-in-the-Middle. He should not do anything with your data.

There were several sources of malleability for standard (this is important!) bitcoin scripts.
The last was fixed with segwit transactions
s2
full member
Activity: 198
Merit: 123
August 29, 2017, 04:27:18 AM
#8
 Wink Thanks amaclin1.

I'm looking for steps to do a malleability test.  E.g. a python script or steps to issue a double spend using a malleability issue.

The only malleability attack I knew of before was the high/low S value, I'm certain there are others but not sure what they are or where to find them.

Guess what would be awesome is something that can run on testnet which issued two tx's for transferring funds from A->B but had two different txids...


come to mention it, perhaps that's all that is required?  I could just sign two identical transactions and issue them at the same time?
sr. member
Activity: 770
Merit: 305
August 14, 2017, 09:29:56 AM
#7
Anyone actually know how to do this?
How to do what?
Test your sources for finding malleability issues?
Ready to pay? I am a great pretender expert in malleability Smiley
s2
full member
Activity: 198
Merit: 123
August 14, 2017, 08:44:55 AM
#6
Anyone actually know how to do this?

This seems like a good read but no obvious script examples.
https://bitcointalksearch.org/topic/m.122410
sr. member
Activity: 770
Merit: 305
August 14, 2017, 12:40:23 AM
#5
how do people make sure they handle this correctly?
... reading and understanding the program code? Grin

genius
aaand what if u dont understand any in code?
you will not understand testing results either  Tongue
jr. member
Activity: 58
Merit: 10
August 12, 2017, 02:01:29 PM
#4
how do people make sure they handle this correctly?
... reading and understanding the program code? Grin

genius
aaand what if u dont understand any in code?
s2
full member
Activity: 198
Merit: 123
August 09, 2017, 02:39:54 AM
#3
Thanks but I'm interested in knowing what sort of malleability attacks are easy to do that I can test with?

Seems difficult to protect against it without usecases I could try on testnet.
sr. member
Activity: 770
Merit: 305
August 08, 2017, 04:13:02 PM
#2
how do people make sure they handle this correctly?
... reading and understanding the program code? Grin
s2
full member
Activity: 198
Merit: 123
August 08, 2017, 09:01:29 AM
#1
Does anyone have any scripts or suggestions on how to test malleability issues in my wallet?

I.e. how do people make sure they handle this correctly?
Jump to: