Pages:
Author

Topic: same-r-value-is-used-for-two-different-addresses - page 2. (Read 479 times)

jr. member
Activity: 211
Merit: 105
simply you can't according algebra.

you have in math something like:

r1,s1,z1 of addres1 and r1,s2,z2 of addres2

and you have equation:

a*addres1 = b*addres2

so:
addres1 = b*addres2/a
addres2 = a*addres1/b

addres1-addres2 = b*addres2/a - a*addres1/b

after computional of this equation
in this example you have b*s1/a=a*s2/b -> is the same - when you make perdorm calc -> you have zero.

but there can be chance if and only if linear distance beetween addres 1 and adress 2 is less than 127 bit.




newbie
Activity: 78
Merit: 0
hi all
i have 2 addresses that have same R value
address 1         same R
address 2         same R
i know R
i know S1    and S2
i know M signed message or Z    M1   and  M2
When a signing secret was used to sign two different messages, you can recover the signing secret with this calculation:
 k = (m1-m2)/(s1-s2)
the problem is that i can recover only privatekey of 1 address
i have need of recover privatekey address 2
what is correct formula  for recover the privatekey of address 1   and address 2 that have same R used in 2 different address?

thanks for your help
Pages:
Jump to: