Post
Topic
Board Development & Technical Discussion
Re: Bitcoin weak transaction nonce question
by
Pablo-wood
on 04/01/2025, 18:22:44 UTC
Hello,
I have 2 questions;
first; can a wallet with at least 10 pairs of transactions with only 5 characters in common in the R value be cracked with a Lattice attack etc. method?
Lattice attack are effective against cryptographic systems where the nonce is reusable or predictable. So in a scenario where the transactions have 5 characters in common, it will be much easy for attackers to exploit potential weaknesses.

Just like in your given scenario an attacker can collect enough samples in which the case study here is 10, then apply a technique known as lattice reduction algorithms (like the Lattice-based attack) to find the nonce k and possibly recover the private key which in conclusion having multiple transactions with 5 characters in common in the R value posses a potential risk.

Quote
I cannot create R in such a pattern even if I want to by giving the k(nonce) value weak. How could this have happened?

This could be due to:
  • Nonce reuse
  • Attackers control
  • poor implementation ramdom of random number generator