{"id":13934,"date":"2026-10-01T01:48:47","date_gmt":"2026-10-01T01:48:47","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13934"},"modified":"2026-10-01T01:48:47","modified_gmt":"2026-10-01T01:48:47","slug":"new-bitcoin-upgrade-catches-hidden-key-leaks-hiding-the-exact-fix","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13934","title":{"rendered":"New Bitcoin upgrade catches hidden key leaks hiding the exact fix"},"content":{"rendered":"

<\/p>\n

\n

Bitcoin improvement proposal BIP461 could make a hidden route for leaking wallet secrets easier to detect. The draft defines a common signing procedure for ECDSA, an existing Bitcoin signature scheme.<\/p>\n

Independent compliant signers should produce identical signatures for the same secret key and message hash, creating a benchmark for detecting departures that could conceal key leakage.<\/p>\n

Authored by Liam Gilligan, the proposal was merged into the BIPs repository on Sept. 16 and remains marked Draft. Its signatures work under existing Bitcoin consensus rules, so implementing this signing procedure requires no consensus change.<\/p>\n

Comparing signatures for deviations<\/h2>\n

ECDSA allows a signer choices while creating a valid signature, including the nonce, a temporary value used in signing. Malicious firmware can exploit that freedom to hide key material in signatures that still pass verification, and BIP461 fixes those choices through a specified deterministic procedure.<\/p>\n

Bitcoin\u2019s acceptance of a signature cannot establish that its creation kept the key safe. A common specification supplies an expected output against which the signer\u2019s behavior can be checked.<\/p>\n

The comparison requires identical inputs and the exact same standard, including access to the secret key on another independent signer. That extra exposure is a practical cost of reproducing the signature. Different results for the same key and message hash show that at least one signer is not following BIP461.<\/p>\n

An honest implementation using another valid ECDSA procedure can also disagree. A mismatch warrants investigation into compliance, but its cause remains unresolved. The comparison alone cannot identify a malicious device or demonstrate theft.<\/p>\n

\n

Related Reading<\/span><\/p>\n

No dice? Your Bitcoin hardware wallet is probably not as secure as you thought it was<\/h3>\n<\/p>\n

<\/span> <\/div>\n

The prescribed algorithm also keeps signatures to at most 70 bytes in the standard DER encoding, excluding Bitcoin\u2019s one-byte sighash flag.<\/p>\n