68 If someone wanted to pretend to be Satoshi by posting a fake signature to defraud people how could they? 2018-11-17T01:28:21.320

35 How do you get a Bitcoin Public Key from a Private Key 2014-05-01T01:47:44.100

24 ECDSA: (v, r, s), what is v? 2015-07-01T09:28:27.847

18 Why the signature is always 65 (1+32+32) bytes long? 2013-08-06T23:31:41.107

16 ECDSA r, s encoding as a signature 2012-01-01T03:05:40.310

14 How do you derive the private key from two signatures that share the same k value? 2018-04-08T12:13:12.360

14 What is the origin of insecure 64-bit nonces in signatures in the Bitcoin chain? 2019-01-11T05:23:16.847

12 Why use DER encoding for signatures? 2013-11-07T07:18:47.087

12 Recovering private key when someone uses the same k twice in ECDSA signatures 2015-02-02T03:56:25.050

10 How vulnerable is bitcoin to quantum algorithms? 2013-04-27T18:41:02.430

10 Why was the Oct 2015 Transaction Malleability event possible in spite of BIP62/66? 2015-10-23T00:05:53.483

9 ECDSA Signature and the "z" value 2014-06-07T05:41:52.527

9 Problems with deterministic ECDSA based on RFC6979 in Bitcoin 2015-02-19T14:14:08.633

8 Transaction signature generation 2012-03-21T23:45:35.913

8 Which programming languages support secp256k1? 2012-05-31T02:21:32.570

8 For a non-technical person, how do I generate a ECDSA key pair easily? 2012-10-28T05:39:00.053

8 What's the rationale of using ECDSA instead of RSA? 2014-01-28T12:19:21.320

8 Is libsecp256k1 faster than OpenSSL? 2015-02-19T16:59:32.600

7 If SHA256 and/or RIPEMD-160 were broken, would all bitcoin addresses be compromised? 2013-03-26T00:07:14.160

7 How does the ECDSA verification algorithm work during transaction? 2014-11-04T06:23:56.660

6 How to generate a public key from a private key using Elliptic Curve Digital Signature Algorithm 2014-10-27T19:46:51.090

6 Is normal ECDSA verification slower than a verification method based on Public Key Recovery? 2014-12-30T19:54:53.483

6 How do you derive the lambda and beta values for endomorphism on the secp256k1 curve? 2015-01-30T15:29:29.333

6 Why isn't Bitcoin using public key extraction from signature to reduce the blockchain size? 2015-12-02T20:56:32.777

6 Bitcoin safe if ECDSA is broken? 2016-06-06T13:46:12.833

6 Are Schnorr signatures quantum-computer resistant? 2017-08-12T10:55:31.967

6 Will Schnorr Multi-signatures completely replace ECDSA? 2019-10-07T11:10:57.927

5 Bitcoin private key, location on ECC curve 2014-05-15T23:53:44.177

5 How do you invert an ECDSA multiplication to get the generator? 2015-03-09T09:32:50.383

5 The complement of s (when s < curve order / 2) 2015-06-25T01:56:12.413

5 How to sign raw transaction given a private key and SHA hash (in java) 2017-01-04T23:55:23.997

5 How were the secp256k1 base point coordinates decided? 2017-08-28T00:16:27.110

5 How are compressed PubKeys generated? 2018-01-23T16:20:12.647

5 What is is minimum possible number for an ECDSA private key? 2018-09-21T17:03:45.950

5 Does MuSig have the same security as 2-2 multisig? 2019-03-06T12:48:17.927

4 Storage of Private Keys 2012-08-26T02:59:14.030

4 ECDSA transaction signing on a smartcard? 2012-12-19T05:46:44.883

4 How much time it takes to verify a Bitcoin signature in the Satoshi client? 2013-01-30T19:03:01.280

4 What are the advantages of using Secp256k1? 2013-09-13T19:04:32.080

4 How can someone verify the signature of a Bitcoin ECDSA signature without knowing the signer's public key? 2015-02-22T18:56:10.393

4 Signing a raw transaction with Python ECDSA (or OpenSSL) 2015-03-13T01:08:48.713

4 bitcoin two identical R 2015-05-27T04:57:11.493

4 Bitcoin how to get X value from Y 2015-07-23T08:13:18.697

4 OpenSSL and Secp256k1 differing in implementation of ECDSA signatures? 2016-11-21T16:33:33.583

4 online tool to play around with ECDSA public keys, message signature verification? 2017-05-15T21:20:42.530

4 Replacing ECDSA (SECP256k1) with Schnorr signatures 2017-11-29T20:00:54.337

4 Invalid public key was spent! How was this possible? 2017-12-20T23:26:42.387

4 Low-s value in bitcoin signature 2019-04-09T13:43:26.443

3 Why do keys need both X and Y coordinates, if X can be solved for Y using the curve equation? 2014-01-01T05:49:16.140

3 The shortest ECDSA signature 2015-07-10T09:47:36.317

3 Are there any signatures where the recid (v) is equal to 29,30 (or 33,34 compressed)? 2015-11-13T03:58:07.027

3 How do I convert Public Key x value to y in Python and verify? 2016-09-12T23:07:18.913

3 Unable to construct a correct raw transaction for bitcoin cash testnet 2018-05-08T09:24:37.190

3 What is the maximum size of a DER encoded ECDSA signature? 2018-07-13T22:16:13.490

3 In ECDSA, why is (r,−s mod n) complementary to (r, s)? 2019-01-05T20:45:52.013

3 ECDSA signature with r value of 31? 2019-02-26T08:54:46.237

3 What is the reasoning behind the choice of 2^256-2^32-977 for the prime on the secp256k1 curve? 2019-03-17T23:35:01.987

3 ECDSA - why not using the cyclic additive group 2019-05-26T14:26:55.803

2 What is the "wallet export format"? 2012-01-08T16:32:19.363

2 Would a transition to a different signature scheme be feasible? 2013-08-23T11:40:02.370

2 How to find out the ECDSA private key perfix version for Altcoins? 2014-01-10T14:58:33.430

2 In ScriptSig, which form of the public key is considered canonical? 2014-02-23T21:39:32.840

2 ECDSA x,y coordinate validity verification doesn't seem to work 2014-11-20T10:47:39.887

2 Where can I find code that allows me to calculate Z1 and Z2 from an ECDSA signature? 2015-01-17T11:21:06.610

2 Signature: encoding a message - transaction to a point of curve y^2=x^3+7 and Bitcoin Core 2015-05-07T16:18:50.460

2 In Elliptic Curve Addition, where does the second point come from? 2015-05-07T17:42:06.690

2 PEM format for ECDSA 2015-12-06T04:09:04.983

2 Can't find correct z1 & z2 for transaction 2016-05-09T05:18:54.823

2 How can I convert a bitcoin private key (hex) into a Bitcoin public key? 2016-07-01T09:00:16.503

2 Why is it harder to generate addresses starting with 1s? 2016-08-28T14:55:33.467

2 How to generate Bitcoin private - public keys with ECDSA module? 2016-11-10T16:04:09.433

2 Why does ScriptSig contain public key, since it can be recovered from the signature and message? 2017-12-21T12:14:38.333

2 Bitcoin - Technical difference between P2PKH and P2SH address generation? 2018-05-12T11:23:25.897

2 Hypothetical Scenario - Address collision with address with already confirmed outgoing transaction 2018-06-19T23:28:41.007

2 Can someone explain me ECDSA (creating public from private key) with 8-bit numbers? 2018-09-22T09:18:56.127

2 Why are some public keys prefixed with 0x00? 2018-10-08T08:25:13.263

2 Bitcoind does not like ECDSA (r, s) pair produced by OpenSSL 2018-10-18T08:54:20.820

2 How to determine first byte (recovery ID) for signatures (message signing)? 2018-12-19T11:06:30.363

2 Bitcoin ECDSA signature in the compact format 2018-12-24T17:39:04.930

2 Why is a cyclic subgroup chosen in ECDSA? 2019-02-22T19:17:10.253

2 Bitcoin scripts that force disclosure of the private key 2019-04-09T08:50:12.563

2 Why is a library's signature of a segwit tx different from Bitcoin Core signature? 2019-06-28T14:28:51.407

2 I tried to recover the public key from the signature, but I failed 2019-07-29T05:15:42.027

1 Is the generator G of the keypair always the same number for all different tx messages in Bitcoin? 2013-03-04T16:45:02.680

1 How are brain wallets generated? 2013-09-26T23:30:45.623

1 Public key from private key generation problem 2014-01-12T17:14:41.820

1 How to get the Z value aka Hash of the outputs to be signed 2014-05-16T03:05:25.867

1 Programming and the ECDSA equation 2014-06-15T22:27:28.023

1 Other ways to determine the validity of a public key 2014-07-13T17:27:15.233

1 How to verify ECDSA of a sample litecoin tx using pycoin? 2014-10-29T02:13:15.530

1 How are transactions secured? 2014-10-30T19:21:11.297

1 How do I get hash to verify transaction? 2015-02-27T17:47:51.050

1 same R value is used for two different addresses? finding z1 and z2 value and privatekey 2015-05-31T03:49:39.213

1 Two identical R value finding z value from two transaction 2015-05-31T04:21:13.340

1 Same identical R value of all transaction not provide corresponding privatekey 2015-06-02T11:12:17.050

1 Why are r and s modulo N? (not P) 2015-08-19T11:57:35.997

1 How do I add two secp256k1 keys together? 2015-10-08T19:16:15.880

1 How does ripple verify the signature? 2015-11-17T07:20:42.010

1 Cryptocurrencies based on RSA instead of ECDSA 2015-12-03T05:40:53.477