暗号資産ナレッジベース

26 の未確認トランザクションのチェーンは、Bitcoin Core 31.0 のウォレットによって禁止されていますか? ↗

mempool では 25 個の未確認トランザクションを超えるチェーンを持つことができますが、ウォレットでは依然として 25 個のトランザクションチェーン制限が適用されます。 bitcoind -help-debug を実行すると、次の...

What does it mean that the security of Bitcoin public keys and 256-bit ECDSA is 128 bits? ↗

What does it mean that the security of 256-bit ECDSA, and therefore Bitcoin keys, is 128 bits? I mean, if I have approximately 2^256 possible points on the elliptic curve (thus possible public keys),...

Receiving donation on a bitcoin address and security issues of reusing the same address ↗

For a blog that only receives occasional small amounts you probably shouldn't worry too much about it. However, if you plan to scale up, here are some things to consider: One issue with using the sam...

How can vulnerabilites in bitcoin be responsibly reported? ↗

Information on current (ie, not past/public/resolved) security issues should be sent to the private [email protected] mailing list. The SourceForge list is now obsolete and defunc...

Is 24 words seed safer than 12 words in terms of bruteforcing the private key ↗

Regardless of whether you have a passphrase or not 12 words is just as secure as 24 words because the resulting public key will still require 2^128 iterations to compute its private key using the most...

Brassard-Høyer-Tapp (BHT) Algorithm and Bitcoin (BIP360) ↗

Grover's is related and some considerations were discussed here on Stackexchange, too. We could design a black box function to break both P2PKH and P2SH (and P2WSH, etc.) addresses in 2^80 single-thr...

How do you derive the private key from two signatures that share the same k value? ↗

ECDSA signatures are pairs (r,s) where r=(k*G).x mod n, and s = (m + r*x)/k mod n, where x is the secret key, k is the random nonce, and m is the message. If you have two s values s1 and s2 for the sa...