random

Bitcoin

Read

Light

<p class="is-style-lead">A new research <a href="https://eprint.iacr.org/2023/841.pdf?ref=nobsbitcoin.com" target="_blank" rel="noopener">finding</a> has picked out vulnerabilities in the new class of Bitcoin Elliptic Curve Digital Signature Algorithm (ECDSA) signature that entities have, since 2015, been using to steal funds from unsuspecting users, skimming over 222 bitcoin (BTC) over the years.</p>



<h2 class="wp-block-heading" id="weakness-in-bitcoin-ecdsa-signatures-exposed">Weakness in Bitcoin ECDSA signatures exposed</h2>



<p>The study, whose findings were released on June 9, shows that flaws in custom ECDSA signatures can expose the sender&#8217;s private keys and even go a long way in disclosing not only the true identity of the sender but their respective addresses, especially if the sender is online.</p>




    <p>
        You might also like:

        <a href="https://crypto.news/bitcoin-liquidity-impacted-on-binance-us-amid-sec-suit/">
            Texas legislature passes new bitcoin mining laws        </a>
    </p>




<p>Researchers have found a new way to exploit a vulnerability in how ECDSA signatures are created in Bitcoin. The weakness occurs when the &#8220;signature nonce is generated by concatenating half of the bits of the message hash together with half of the bits of the secret signing key.&#8221; In this way, the attacker can proceed to create fake ECDSA signatures that appear to be valid. </p>



<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
<iframe title="Bitcoin&#039;s Blockchain Explained - Lesson 4: Elliptic Curve Digital Signature Algorithm intro" width="1020" height="574" src="https://www.youtube.com/embed/C5OXqVe0sxk?start=20&#038;feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
</div></figure>



<p>To execute this &#8220;lattice-based attack,&#8221; researchers said the attacker could recover the sender&#8217;s ECDSA private keys only if they knew the nonce used to generate a single signature. A nonce in Bitcoin is a unique, random number generated by a miner that&#8217;s used to create a hash. This hash satisfies Bitcoin&#8217;s difficulty requirements when verifying a block of bitcoin (BTC) transactions, preventing fraud and double spending.</p>



<h2 class="wp-block-heading" id="approximately-90-000-custom-signatures-affected">Approximately 90,000 custom signatures affected</h2>



<p>The ECDSA signature is an algorithmic algorithm that is used to sign transactions. In the Bitcoin blockchain, all private key holders, that is, the owners of bitcoin (BTC), must sign transactions, verifying that they are owners before those transactions are processed on the chain.&nbsp;</p>



<p>The ECDSA signature necessary to approve transactions is created using the private and public keys of the sender. This ECDSA signature algorithm is critical in ensuring that only the sender of the coin is the true owner. At the same time, it protects against double-spending and fraud.</p>



<p>The new finding reveals that custom ECDSA signatures in the blockchain network are vulnerable and can leak funds, true identities, and the sender&#8217;s location. During the investigation, nearly 90,000 vulnerable custom ECDSA signatures were identified. These were created by 900 different addresses that have since moved 222 BTC.</p>




    <p>
        Read more:

        <a href="https://crypto.news/former-meta-paypal-executive-building-payment-solution-on-bitcoin-lightning-network/">
            Former Meta, PayPal executive building payment solution on Bitcoin Lightning Network        </a>
    </p>

An 8-year vulnerability affecting Bitcoin signing process identified, over 900 addresses affected

目录

crypto.news

发布于 2023年6月10日的其他文章

Ethereum futures liquidations soar to 1-month high on OKX

Bitcoin Technical Analysis! This Critical Level Could Continue the Decline in Altcoins.

Intro to Radiant programming

US Sen. Elizabeth Warren Says Binance Lied to Congress in Letter to DOJ Asking for an Investigation

Polygon (MATIC) Loses Its Way: What’s Happening with MATIC Coin?

SEC Actions ‘Pave the Way’ for CBDC, Says US Senator Hagerty

订阅我们免费的电子期刊，获取每日最新加密领域动态！