База знаний: криптоторговля, кошельки и блокчейн

How do you derive the private key from two signatures that share the same k value?

ECDSA signatures are pairs (r,s) where r=(k*G).x mod n, and s = (m + r*x)/k mod n, where x is the secret key, k is the random nonce, and m is the message. If you have two s values...