4

The answers to this question state that reusing the same address for spending several times seriously compromises my private key so that should never be done. However, isn't this exactly what is happening when I reattach a transaction that was not picked up by the network (which is obviously encouraged)? Isn't it the case that with every reattach attempt my private key becomes easier to "guess"?

Improve this question

1 Answer 1

Reset to default
7

No.

The data signed in a transaction don't include parent and branch transaction hash.

So when you reattach a transaction the signature is unchanged. It means that the portion of the private key disclosed when you reattach is exactly the same as the portion disclosed during first "attach to tangle".

This design choice (to not include parent and branch transaction in signed data) make possible several useful things :

  • anyone can reattach a transaction to the tangle
  • PoW delegation
  • re-attachinging don't disclose new portion of the private key
Improve this answer
2
  • Thanks a lot, I guess this answers also this question: iota.stackexchange.com/q/587/607 ?
    – lex82
    Dec 7, 2017 at 12:31
  • @lex82 yes, it does. A 'resend' is never required, only reattaches.
    – cmpn
    Dec 7, 2017 at 12:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.