8 ms·
Wait, how does it work? What is signed is hashed, including the nonce. People use some kind of "replace by fee" transactions all the time, as far as I know the
by TacticalCoder 5y ago
Wait, how does it work? What is signed is hashed, including the nonce.
People use some kind of "replace by fee" transactions all the time, as far as I know these broadcasted transactions, typically with higher fees, have the exact same nonce as the previous one.
If simply reusing the same nonce allowed someone to crack the private key, it'd be a much bigger issue than a few wallet emptied. It'd be a tremendous amount of wallets emptied, daily.
Can someone explain in more details?
- TacticalCoder 5y agoRe-reading the article it's not when the nonce is reused, but when in the (r,s) of the signature the 'r' is reused. To end up with the same 'r' twice you must reuse the nonce but, I think, not only that. If you reuse the nonce but change any other parameter (for example putting slightly higher gas fee), then I'm pretty sure the 'r' changes (I'll go test that now out of curiosity).
- saurik 5y agoYou are thinking of the nonce at the Ethereum account level, not the nonce used as the ECDSA signature level. This has nothing to do with Ethereum other than that Ethereum uses ECDSA signatures for security. Search for "ECDSA nonce" on Google and most of the articles and videos you will find will be explaining nonce reuse issues.
- ChrisClark 5y agoThe Ethereum transaction nonce you are talking about is not the same nonce in the article. It is talking about the cryptography signing process, not the transaction ordering one.