Reusing Nonces in ECDSA Signatures: A Critical Look

Check this out, a scenario with ECDSA signatures on secp256k1 where nonces aren’t following RFC6979. We have 7 private keys and 3 nonces reused across them. 9 valid signatures available, but no known keys or nonces.

Sounds complicated. You can’t solve it, right? Just too many unknowns compared to equations. Maybe those reused nonces hint at something more significant going on... or just a total mess.

Nah, it's solvable if you have the same r value repeated in two transactions. Just grab r, s1, s2, z1, z2. Simple math in Python lets you isolate k and find the private key. Just look at this formula: k = (z1 z2) / (s1 s2) mod n d = ((s1 * k z1) / r) mod n And yeah, there are tools to check if your address has reused r values.

@mr.jeanfrancois, did you miss the point? It’s not just about finding one of the nonces or private keys. You have to know something about those k values or d1-d7 to even start.

I see your perspective, but it’s a different situation here. We know d1 is significant and have some clues about k values. The entropy levels suggest leakage that can be exploited. There’s a chance to dig into some dormant BTC in compromised wallets.