Quote from: DannyHamilton on January 22, 2021, 02:49:46 PM

EDIT: I say too much and take too long to type. o_e_i_e_o has responded with mostly thee same response, only faster. I'll leave this here just in case anyone finds that it

Alternatively...

Study advanced mathematics
Become the top expert in the entire world in the mathematics related to ECDSA, SHA256, and RIPEMD160
Discover a mathematical weakness that nobody else in the world has ever discovered related to those algorithms
Use that mathematical weakness to calculate your private keys

Quote from: o_e_i_e_o on January 22, 2021, 02:49:46 PM

Quote from: o_e_l_e_o on January 22, 2021, 02:39:58 PM

Quote from: DannyHamilton on January 22, 2021, 02:49:46 PM

Alternatively...

Study advanced mathematics
Become the top expert in the entire world in the mathematics related to ECDSA, SHA256, and RIPEMD160
Discover a mathematical weakness that nobody else in the world has ever discovered related to those algorithms
Use that mathematical weakness to calculate your private keys

Thanks for the answer and i'll go for 2nd one.

And ECC is interesting and i prefer this over pgp because you can use it for two things, encryption and bitcoin address.
It provides same level of security as rsa with much smaller key size and it is faster that rsa, but ECDSA is vulnerable to k-reuse attack. what's the solution to this problem of nonce reuse attack.
so does it takes computational power to generate unique random number k everytime and it can't be done on mobile phone?

and why RSA is not vulnerable to nonce reuse attack? , so why satoshi didn't chose RSA instead of ECC (because it provides same security with smaller key length?)