<p>Yes, this happens when the same key is used perform multiple signatures with the same R value - simply using the same key for multiple, sanely produced signatures with a different R value will not result in leakage, no matter how many such signatures you make.</p>
<p>Modern wallets use a deterministic nonce via <a href="https://www.rfc-editor.org/rfc/rfc6979" rel="nofollow noreferrer">RFC 6979</a>.</p>

CC BY-SA 4.0
2020-08-01T16:46:02.070Z
Note that no competent software would ever re-use a nonce.
Claris
CC BY-SA 4.0
2020-08-03T00:17:54.800Z
@Raghav Sood: note that OP was asking about reusing keys, not reusing nonces. Reusing keys will not leak your private keys (as long as the nonces are securely generated) - but may reduce your privacy.
Pieter Wuille
CC BY-SA 4.0
2020-08-03T01:55:30.587Z
@PieterWuille True, but I suspect the OP was referring to the nonce issues, since they specifically called out faulty clients, which is how several keys were leaked in the past
Raghav Sood
CC BY-SA 4.0
2020-08-01T11:35:32.713Z
2020-08-01T11:35:32.713Z
2021-10-07T07:34:52.683Z
Raghav Sood
<p>Is it true that the cryptography which is used in bitcoin allows for leakage of information which could be used to recalculate the private key - IF you are continuously reusing the <strong>same</strong> public address for transactions?</p>
<p>I think there were faulty client implementations in the past which have mishandled the protocol and leaked the keys when reusing same address.</p>
<p>If that is correct, is it possible to make any kind of mathematical assumption, how many times of reusing the same address could practically enable the reengineering of the private key?</p>
<blockquote>
<p>After how many times of reusage would you strictly advice a user to
migrate to another wallet with a new private key? Two times reusage is enough to break the key?</p>
</blockquote>

<private-key><cryptography><ecdsa><address-reuse>
Bitcoin's cryptographic protocol allows for leakage of information about one's Private Key, making recalculation of the private key possible?
Marieanndrasuper
# Bitcoin's cryptographic protocol allows for leakage of information about one's Private Key, making recalculation of the private key possible?

(Asked by: username_0 on 2020-08-01)

Is it true that the cryptography which is used in bitcoin allows for leakage of information which could be used to recalculate the private key - IF you are continuously reusing the **same** public address for transactions?

I think there were faulty client implementations in the past which have mishandled the protocol and leaked the keys when reusing same address.

If that is correct, is it possible to make any kind of mathematical assumption, how many times of reusing the same address could practically enable the reengineering of the private key?

> After how many times of reusage would you strictly advice a user to
> migrate to another wallet with a new private key? Two times reusage is enough to break the key?

**Tags:** private-key, cryptography, ecdsa, address-reuse


---

## 1 answers

### Answer by username_1 on 2020-08-01. Score: 2

Yes, this happens when the same key is used perform multiple signatures with the same R value - simply using the same key for multiple, sanely produced signatures with a different R value will not result in leakage, no matter how many such signatures you make.

Modern wallets use a deterministic nonce via [RFC 6979](https://www.rfc-editor.org/rfc/rfc6979).

> **Comments:**
> **username_2**: Note that no competent software would ever re-use a nonce.  
> **username_3**: @username_1: note that OP was asking about reusing keys, not reusing nonces. Reusing keys will not leak your private keys (as long as the nonces are securely generated) - but may reduce your privacy.  
> **username_1**: @PieterWuille True, but I suspect the OP was referring to the nonce issues, since they specifically called out faulty clients, which is how several keys were leaked in the past  

---

