75 If someone wanted to pretend to be Satoshi by posting a fake signature to defraud people how could they? 2018-11-17T01:28:21.320

39 How do you get a Bitcoin Public Key from a Private Key 2014-05-01T01:47:44.100

34 ECDSA: (v, r, s), what is v? 2015-07-01T09:28:27.847

19 Why the signature is always 65 (1+32+32) bytes long? 2013-08-06T23:31:41.107

17 ECDSA r, s encoding as a signature 2012-01-01T03:05:40.310

15 Why use DER encoding for signatures? 2013-11-07T07:18:47.087

15 Recovering private key when someone uses the same k twice in ECDSA signatures 2015-02-02T03:56:25.050

15 How do you derive the private key from two signatures that share the same k value? 2018-04-08T12:13:12.360

15 What is the origin of insecure 64-bit nonces in signatures in the Bitcoin chain? 2019-01-11T05:23:16.847

11 What are the advantages of Schnorr vs ECDSA? 2018-07-16T02:20:06.560

11 What are the potential attacks against ECDSA that would be possible if we used raw public keys as addresses? 2020-04-05T10:47:09.357

10 How vulnerable is bitcoin to quantum algorithms? 2013-04-27T18:41:02.430

10 How does the ECDSA verification algorithm work during transaction? 2014-11-04T06:23:56.660

10 Why was the Oct 2015 Transaction Malleability event possible in spite of BIP62/66? 2015-10-23T00:05:53.483

9 Transaction signature generation 2012-03-21T23:45:35.913

9 ECDSA Signature and the "z" value 2014-06-07T05:41:52.527

9 Problems with deterministic ECDSA based on RFC6979 in Bitcoin 2015-02-19T14:14:08.633

8 Which programming languages support secp256k1? 2012-05-31T02:21:32.570

8 For a non-technical person, how do I generate a ECDSA key pair easily? 2012-10-28T05:39:00.053

8 If SHA256 and/or RIPEMD-160 were broken, would all bitcoin addresses be compromised? 2013-03-26T00:07:14.160

8 What's the rationale of using ECDSA instead of RSA? 2014-01-28T12:19:21.320

8 Is libsecp256k1 faster than OpenSSL? 2015-02-19T16:59:32.600

7 How to generate a public key from a private key using Elliptic Curve Digital Signature Algorithm 2014-10-27T19:46:51.090

7 How to sign raw transaction given a private key and SHA hash (in java) 2017-01-04T23:55:23.997

7 online tool to play around with ECDSA public keys, message signature verification? 2017-05-15T21:20:42.530

7 Are Schnorr signatures quantum-computer resistant? 2017-08-12T10:55:31.967

6 Is normal ECDSA verification slower than a verification method based on Public Key Recovery? 2014-12-30T19:54:53.483

6 How do you derive the lambda and beta values for endomorphism on the secp256k1 curve? 2015-01-30T15:29:29.333

6 Bitcoin how to get X value from Y 2015-07-23T08:13:18.697

6 Why isn't Bitcoin using public key extraction from signature to reduce the blockchain size? 2015-12-02T20:56:32.777

6 Bitcoin safe if ECDSA is broken? 2016-06-06T13:46:12.833

6 Replacing ECDSA (SECP256k1) with Schnorr signatures 2017-11-29T20:00:54.337

6 What is is minimum possible number for an ECDSA private key? 2018-09-21T17:03:45.950

6 Does MuSig have the same security as 2-2 multisig? 2019-03-06T12:48:17.927

6 Will Schnorr Multi-signatures completely replace ECDSA? 2019-10-07T11:10:57.927

5 Bitcoin private key, location on ECC curve 2014-05-15T23:53:44.177

5 How do you invert an ECDSA multiplication to get the generator? 2015-03-09T09:32:50.383

5 The complement of s (when s < curve order / 2) 2015-06-25T01:56:12.413

5 How were the secp256k1 base point coordinates decided? 2017-08-28T00:16:27.110

5 How are compressed PubKeys generated? 2018-01-23T16:20:12.647

5 What is the reasoning behind the choice of 2^256-2^32-977 for the prime on the secp256k1 curve? 2019-03-17T23:35:01.987

4 Storage of Private Keys 2012-08-26T02:59:14.030

4 ECDSA transaction signing on a smartcard? 2012-12-19T05:46:44.883

4 How much time it takes to verify a Bitcoin signature in the Satoshi client? 2013-01-30T19:03:01.280

4 What are the advantages of using Secp256k1? 2013-09-13T19:04:32.080

4 How can someone verify the signature of a Bitcoin ECDSA signature without knowing the signer's public key? 2015-02-22T18:56:10.393

4 Signing a raw transaction with Python ECDSA (or OpenSSL) 2015-03-13T01:08:48.713

4 bitcoin two identical R 2015-05-27T04:57:11.493

4 OpenSSL and Secp256k1 differing in implementation of ECDSA signatures? 2016-11-21T16:33:33.583

4 Invalid public key was spent! How was this possible? 2017-12-20T23:26:42.387

4 What is the maximum size of a DER encoded ECDSA signature? 2018-07-13T22:16:13.490

4 Low-s value in bitcoin signature 2019-04-09T13:43:26.443

4 How many bitcoin transactions can be verified per second on commodity hardware in 2020? 2020-04-18T09:34:34.203

3 Why do keys need both X and Y coordinates, if X can be solved for Y using the curve equation? 2014-01-01T05:49:16.140

3 The shortest ECDSA signature 2015-07-10T09:47:36.317

3 Are there any signatures where the recid (v) is equal to 29,30 (or 33,34 compressed)? 2015-11-13T03:58:07.027

3 How do I convert Public Key x value to y in Python and verify? 2016-09-12T23:07:18.913

3 Unable to construct a correct raw transaction for bitcoin cash testnet 2018-05-08T09:24:37.190

3 In ECDSA, why is (r,−s mod n) complementary to (r, s)? 2019-01-05T20:45:52.013

3 ECDSA signature with r value of 31? 2019-02-26T08:54:46.237

3 Bitcoin scripts that force disclosure of the private key 2019-04-09T08:50:12.563

3 ECDSA - why not using the cyclic additive group 2019-05-26T14:26:55.803

3 Elliptic Curve Point at Infinity 2020-04-09T16:10:04.100

2 What is the "wallet export format"? 2012-01-08T16:32:19.363

2 Would a transition to a different signature scheme be feasible? 2013-08-23T11:40:02.370

2 How to find out the ECDSA private key perfix version for Altcoins? 2014-01-10T14:58:33.430

2 In ScriptSig, which form of the public key is considered canonical? 2014-02-23T21:39:32.840

2 ECDSA x,y coordinate validity verification doesn't seem to work 2014-11-20T10:47:39.887

2 Where can I find code that allows me to calculate Z1 and Z2 from an ECDSA signature? 2015-01-17T11:21:06.610

2 How do I get hash to verify transaction? 2015-02-27T17:47:51.050

2 Signature: encoding a message - transaction to a point of curve y^2=x^3+7 and Bitcoin Core 2015-05-07T16:18:50.460

2 In Elliptic Curve Addition, where does the second point come from? 2015-05-07T17:42:06.690

2 PEM format for ECDSA 2015-12-06T04:09:04.983

2 Can't find correct z1 & z2 for transaction 2016-05-09T05:18:54.823

2 How can I convert a bitcoin private key (hex) into a Bitcoin public key? 2016-07-01T09:00:16.503

2 Why is it harder to generate addresses starting with 1s? 2016-08-28T14:55:33.467

2 How to generate Bitcoin private - public keys with ECDSA module? 2016-11-10T16:04:09.433

2 Recovering ECDSA public key from the signature 2017-10-20T07:09:19.390

2 Why does ScriptSig contain public key, since it can be recovered from the signature and message? 2017-12-21T12:14:38.333

2 How can I fix this: (Non-canonical signature: S value is unnecessarily high) 2018-01-11T18:20:59.527

2 Bitcoin - Technical difference between P2PKH and P2SH address generation? 2018-05-12T11:23:25.897

2 Hypothetical Scenario - Address collision with address with already confirmed outgoing transaction 2018-06-19T23:28:41.007

2 Can someone explain me ECDSA (creating public from private key) with 8-bit numbers? 2018-09-22T09:18:56.127

2 Why are some public keys prefixed with 0x00? 2018-10-08T08:25:13.263

2 Bitcoind does not like ECDSA (r, s) pair produced by OpenSSL 2018-10-18T08:54:20.820

2 How to figure out the coordinates of a compressed G point? 2018-12-16T22:42:58.883

2 How to determine first byte (recovery ID) for signatures (message signing)? 2018-12-19T11:06:30.363

2 Bitcoin ECDSA signature in the compact format 2018-12-24T17:39:04.930

2 Why is a cyclic subgroup chosen in ECDSA? 2019-02-22T19:17:10.253

2 How to sign bitcoin raw transactions with Python offline 2019-04-04T11:39:14.590

2 Why is a library's signature of a segwit tx different from Bitcoin Core signature? 2019-06-28T14:28:51.407

2 I tried to recover the public key from the signature, but I failed 2019-07-29T05:15:42.027

2 How to subtract two points on an elliptic curve? 2020-01-14T10:53:50.290

2 Openssl magic values? Secp256k1 and ECDSA similarities? What makes secp256k1 special? 2020-06-10T20:07:56.780

2 Does every transaction have the same signature? 2020-11-29T07:51:47.093

2 secp256k1 lib compiling issue "invalid use of incomplete type secp256k1_context" 2021-02-10T08:56:46.217

1 Is the generator G of the keypair always the same number for all different tx messages in Bitcoin? 2013-03-04T16:45:02.680

1 How are brain wallets generated? 2013-09-26T23:30:45.623

1 Public key from private key generation problem 2014-01-12T17:14:41.820