<p>Sounds like a complicated way to lose money.</p>
<p>Since most output types are based on hashes, it's likely that a sender would not be able to tell that your public key is not on secp256k1. Your transaction would succeed and your funds would be associated with the public key you communicated.</p>
<p>Then when you try to spend them, you'd be out of luck, since you only know the private key to that public key on a different curve and do not know the necessary private key to make a secp256k1 valid signature—you would be unable to spend the funds.</p>

CC BY-SA 4.0
2022-07-16T13:46:23.863Z
2022-07-16T13:46:23.863Z
Murch
<p>Or I changed the value of G in EC (K=k*G) what will happen</p>

CC BY-SA 4.0
2022-07-16T13:44:48.797Z
suppose I invent an algorithm that maps my private key to your public key, should I be able to spend your coins?
Mike D
CC BY-SA 4.0
2022-07-16T13:46:56.283Z
@MikeD: It's even worse: "suppose I create a private key but then send money to a completely unrelated public key".
Murch
<transactions><private-key><public-key>
suppose if I derived a public key from another algorithm instead of elliptical curve will the node reject my tx?
Athul A
# suppose if I derived a public key from another algorithm instead of elliptical curve will the node reject my tx?

(Asked by: username_0 on 2022-07-16)

Or I changed the value of G in EC (K=k\*G) what will happen

**Tags:** transactions, private-key, public-key

> **Comments:**
> **username_1**: suppose I invent an algorithm that maps my private key to your public key, should I be able to spend your coins?  
> **username_2**: @username_1: It's even worse: "suppose I create a private key but then send money to a completely unrelated public key".  

---

## 1 answers

### Answer by username_2 on 2022-07-16. Score: 4

Sounds like a complicated way to lose money.

Since most output types are based on hashes, it's likely that a sender would not be able to tell that your public key is not on secp256k1. Your transaction would succeed and your funds would be associated with the public key you communicated.

Then when you try to spend them, you'd be out of luck, since you only know the private key to that public key on a different curve and do not know the necessary private key to make a secp256k1 valid signature—you would be unable to spend the funds.


---

