Send email Copy Email Address

A Small Subgroup Attack on Bitcoin Address Generation


We show how a small subgroup confinement-like attack may be mounted on the Bitcoin addresses generation protocol, by inspecting a special subgroup of the group associated to point multiplication. This approach does not undermine the system security but highlights the importance of using fair random sources during the private key selection.

Date published


Date last modified

2020-12-03 11:23:40