Security • Estimated 15m
Nonce Reuse Attack
security.nonce-reuse-attack
Reusing the same Schnorr nonce across different signatures lets observers solve for the signer private key from public signature data. It is a narrow signing failure mode that explains why nonce generation hygiene matters in wallets and multisig protocols.
Open visual node page
• Browse the concept library
Curated resources (3)
- Nonce Reuse Attack (article) Decoding walkthrough showing how reused Schnorr nonces expose the private key across two signatures.
- BIP 340: Schnorr Signatures for secp256k1 (article) Primary specification for BIP340 signing, including nonce derivation context and why accidental nonce reuse can leak the secret key.
- Programming Bitcoin (book) Signature-level background for nonce use, key leakage failure modes, and Bitcoin script verification context.
Direct prerequisites (1)
Direct dependents (0)
Canonical site description: Interactive Bitcoin knowledge graph with prerequisites, curated resources, and structured topic pages.