Post
Topic
Board Bitcoin Discussion
Re: Craig Wright? - signed Bitcoin message
by
mynonce
on 30/10/2021, 21:11:53 UTC
That means the creator can't sign with the 'r' key, similar to the 1LZtnC7Ck37V9uLGGXFmaVkeaLyzFLvf6W case.
This means the creator can't sign from any of the addresses. Only from the one whose public key is equal with the sum of the addresses' public keys.

If the creator is Satoshi than he can sign with 2 keys. One key is the 'relative' key and the other one the 'absolute' key.

Let me explain it with 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa (Satoshi's receiving address for the coinbase transaction of the genesis block).
We assume that the private key for that address is kSat=10000. Satoshi creates a 'relative' key with krel=100, so the 'absolute' key would have the private key kabs=10100. He publishes the 2 public keys ('relative' and 'absolute') with signatures and we can check that they are valid and that he is the owner of 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa.

In our case (OP) we only have the 'relative' key signature. The second one ('absolute' key signature) is missing.

The good way is to sign a message from 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa
why not just give you a signed message from the - 1C7X4UWpSa4GteWHaRBm49fMCC2SNvJQF - which supposedly a Satoshi's address?

Maybe for security reasons. Let's say he wants to communicate with us and wants to sign the messages. For each signature he would need the private key kSat. With the above example he could prove it only once and then use the private key kabs for all signatures. If hacked, he could create a new kabsnew.