So I’ve got these two signatures and trying to figure out the nonce. Here’s what I got:
d1=(k1*s1-z1)/r1
k1=(d1*r1+z1)/s1
r1=(k1*s1-z1)/d1
s1=(d1*r1+z1)/k1
z1=k1*s1-d1*r1
If we have another signature, how do I find k?
Actually, I think if we have an inverse, we can write it like this:
d2=k1^(n-2)-1
k2=k1^(n-2)
r2=(k2*s2-z2)/d2
s2=(d2*r2+z2)/k2
z2=k2*s2-d2*r2
Still not sure how to calculate k from 1/k though.
Here’s an example I’m working with:
d1=(k1*s1-z1)/r1
d1=000000000000000000000000000000000000000000000000000000000000000e
k1=000000000000000000000000000000000000000000000000000000000000000f
r1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e
s1=02d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e
z1=k1*s1-d1*r1
If I have another signature, it seems d2=k1^(n-2)-1.
What do you think?