12 votes
Accepted

Address re-use and snapshot

You should never send iota to an address that was already spent. This will make it possible for an attacker to steal your iotas. This rule is uninfluenced by any snapshot. The problem after a ...
user avatar
10 votes
Accepted

Can someone explain very simplified how the Winternitz OTS/Lamport OTS works?

Simplified, Lamport One-Time-Signatures (OTS) work as follows. For illustration purposes I am using Bits and not Trits. Assume you have a private key PRIV that consists of 100 (random) pairs of ...
user avatar
  • 1,663
4 votes

Why does IOTA use Winternitz signatures?

One of the reasons is quantum-security. Traditional cryptocurrencies base their security on elliptic-curve cryptography. Classical examples of such algorithms are the RSA Cryptosystem, Diffie-Hellman ...
user avatar
  • 1,663
3 votes
Accepted

IOTA Winternitz Signature Scheme Details

All hashes in the signing function use Kerl. We start from an 81 tryte subseed that is generated by taking Kerl(seed + index). This will make the subseed sufficiently independent so that it is ...
user avatar
1 vote

What is the "main" reason for using Winternitz signatures?

Firstly, it is to be quantum-secure: https://iota.stackexchange.com/a/1113/249 And secondly because there aren't many alternative quantum-secure signature schemes to begin with: https://iota....
user avatar
  • 1,663
1 vote

How to get iota out of an address that has already been used twice?

How to get iota out of an address that has already been used twice? use the CLI wallet https://github.com/iotaledger/cli-app to avoid the "key reuse" error Is it possible to get IOTAs safely out ...
user avatar
  • 197
1 vote

Address re-use and snapshot

The seed itself is still safe to use, the one time signature weakening occurs only for that specific address (you leak part of the private key "paired" with the address itself, not part of your seed). ...
user avatar
  • 146

Only top scored, non community-wiki answers of a minimum length are eligible