<p>Assuming the two private keys are unrelated, the answer is no.</p>

<p>The reason for this is simple: there are 3 unknowns (the two private keys, and the single secret k value), but only two equations (the ECDSA validation equation for both signatures).</p>

<p>If a relation is known between the two private keys (like one is twice the other, or one is one higher than the other, ..), another equation becomes known, and the system becomes solvable.</p>

CC BY-SA 4.0
2019-07-06T08:49:27.960Z
2019-07-06T08:49:27.960Z
Pieter Wuille
<p>Everyone knows an error in the Blockchain when the same value of "R" can be calculated and find out the private key of the transaction:</p>

<p><a href="https://bitcoin.stackexchange.com/questions/25814/ecdsa-signature-and-the-z-value">ECDSA Signature and the &quot;z&quot; value</a></p>

<p>But I have a question. Can I find two private keys with the same value of "R"?
Can you please tell if you can get the value "K" if you know that two transactions signed different private keys, and the value "R" on these two transactions is the same?</p>

<transactions><private-key><raw-transaction><signrawtransaction><raw>
Two transactions are signed by different private keys, and the value of "R" for these two transactions is the same?
Rozwrcd
# Two transactions are signed by different private keys, and the value of "R" for these two transactions is the same?

(Asked by: username_0 on 2019-07-05)

Everyone knows an error in the Blockchain when the same value of "R" can be calculated and find out the private key of the transaction:

[ECDSA Signature and the "z" value](https://bitcoin.stackexchange.com/questions/25814/ecdsa-signature-and-the-z-value)

But I have a question. Can I find two private keys with the same value of "R"?
Can you please tell if you can get the value "K" if you know that two transactions signed different private keys, and the value "R" on these two transactions is the same?

**Tags:** transactions, private-key, raw-transaction, signrawtransaction, raw


---

## 1 answers

### Answer by username_1 on 2019-07-06. Score: 2

Assuming the two private keys are unrelated, the answer is no.

The reason for this is simple: there are 3 unknowns (the two private keys, and the single secret k value), but only two equations (the ECDSA validation equation for both signatures).

If a relation is known between the two private keys (like one is twice the other, or one is one higher than the other, ..), another equation becomes known, and the system becomes solvable.


---

