Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> Curve

In 2020, Sala, Sogiorno and Taufer were able to find the private keys of some Bitcoin addresses, thus being able to spend the cryptocurrency linked to them. This was unexpected since the recovery of non-trivial private keys for blockchain addresses is deemed to be an infeasible problem. In this pape...

Full description

Bibliographic Details
Main Authors: Antonio J. Di Scala, Andrea Gangemi, Giuliano Romeo, Gabriele Vernetti
Format: Article
Language:English
Published: MDPI AG 2022-08-01
Series:Mathematics
Subjects:
Online Access:https://www.mdpi.com/2227-7390/10/15/2746
_version_ 1797413082973077504
author Antonio J. Di Scala
Andrea Gangemi
Giuliano Romeo
Gabriele Vernetti
author_facet Antonio J. Di Scala
Andrea Gangemi
Giuliano Romeo
Gabriele Vernetti
author_sort Antonio J. Di Scala
collection DOAJ
description In 2020, Sala, Sogiorno and Taufer were able to find the private keys of some Bitcoin addresses, thus being able to spend the cryptocurrency linked to them. This was unexpected since the recovery of non-trivial private keys for blockchain addresses is deemed to be an infeasible problem. In this paper, we widen this analysis by mounting a similar attack on other small subsets of the set of private keys. We then apply it to other blockchains as well, examining Ethereum, Dogecoin, Litecoin, Dash, Zcash and Bitcoin Cash. In addition to the results, we also explain the techniques we have used to perform this exhaustive search for all the addresses that have ever appeared in these blockchains, and we give an estimate of the time needed to perform all the computations. Finally, we also examine the possibility of mounting a similar attack on other elliptic curves used in blockchains, i.e., Curve25519 and NIST P-256.
first_indexed 2024-03-09T05:12:26Z
format Article
id doaj.art-e23f1d9a566148a79520872d1e7f9de2
institution Directory Open Access Journal
issn 2227-7390
language English
last_indexed 2024-03-09T05:12:26Z
publishDate 2022-08-01
publisher MDPI AG
record_format Article
series Mathematics
spelling doaj.art-e23f1d9a566148a79520872d1e7f9de22023-12-03T12:48:20ZengMDPI AGMathematics2227-73902022-08-011015274610.3390/math10152746Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> CurveAntonio J. Di Scala0Andrea Gangemi1Giuliano Romeo2Gabriele Vernetti3DISMA, Department of Mathematical Sciences, Politecnico of Turin, Corso Duca degli Abruzzi, 24, 10129 Torino, ItalyDISMA, Department of Mathematical Sciences, Politecnico of Turin, Corso Duca degli Abruzzi, 24, 10129 Torino, ItalyDISMA, Department of Mathematical Sciences, Politecnico of Turin, Corso Duca degli Abruzzi, 24, 10129 Torino, ItalyDAUIN, Department of Control and Computer Engineering, Politecnico of Turin, Corso Duca degli Abruzzi, 24, 10129 Torino, ItalyIn 2020, Sala, Sogiorno and Taufer were able to find the private keys of some Bitcoin addresses, thus being able to spend the cryptocurrency linked to them. This was unexpected since the recovery of non-trivial private keys for blockchain addresses is deemed to be an infeasible problem. In this paper, we widen this analysis by mounting a similar attack on other small subsets of the set of private keys. We then apply it to other blockchains as well, examining Ethereum, Dogecoin, Litecoin, Dash, Zcash and Bitcoin Cash. In addition to the results, we also explain the techniques we have used to perform this exhaustive search for all the addresses that have ever appeared in these blockchains, and we give an estimate of the time needed to perform all the computations. Finally, we also examine the possibility of mounting a similar attack on other elliptic curves used in blockchains, i.e., Curve25519 and NIST P-256.https://www.mdpi.com/2227-7390/10/15/2746cryptographyblockchainBitcoinelliptic curvessubsets analysisaddresses
spellingShingle Antonio J. Di Scala
Andrea Gangemi
Giuliano Romeo
Gabriele Vernetti
Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> Curve
Mathematics
cryptography
blockchain
Bitcoin
elliptic curves
subsets analysis
addresses
title Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> Curve
title_full Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> Curve
title_fullStr Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> Curve
title_full_unstemmed Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> Curve
title_short Special Subsets of Addresses for Blockchains Using the <i>secp256k1</i> Curve
title_sort special subsets of addresses for blockchains using the i secp256k1 i curve
topic cryptography
blockchain
Bitcoin
elliptic curves
subsets analysis
addresses
url https://www.mdpi.com/2227-7390/10/15/2746
work_keys_str_mv AT antoniojdiscala specialsubsetsofaddressesforblockchainsusingtheisecp256k1icurve
AT andreagangemi specialsubsetsofaddressesforblockchainsusingtheisecp256k1icurve
AT giulianoromeo specialsubsetsofaddressesforblockchainsusingtheisecp256k1icurve
AT gabrielevernetti specialsubsetsofaddressesforblockchainsusingtheisecp256k1icurve