CryptoDeepTools

The Twist Attack implementation demonstrates how to recover partial private key values using specific points on the secp256k1 elliptic curve. By combining these partial values with the Chinese Remainder Theorem (CRT) and the Sagemath pollard rho function (discrete_log_rho), a Bitcoin wallet can be restored within a timeframe of 5-15 minutes.

For detailed walkthroughs, refer to the following resources:

• Video Tutorial: https://youtu.be/S_ZUcM2cD8I
• Written Tutorial: https://cryptodeep.ru/twist-attack

Esplora is an open-source, self-hosted blockchain explorer developed by the Blockstream team. It allows users to independently deploy and manage their own blockchain browser, providing complete control over data and increased privacy.

Key Capabilities:

• Self-deployment: Run locally on your own server or virtual machine.
• Multi-Blockchain Support: Supports Bitcoin, Litecoin, Liquid, and other Bitcoin-compatible blockchains.
• Advanced Search: Powerful tools to find specific transactions, addresses, or blocks.
• Data Visualization: Visualizes transaction graphs, block reward distributions, and other statistics.
• Built-in API: Provides an API for integration with other applications to automate tasks and collect data.

VulnCipher is a scientific cryptanalytic framework designed to identify and analyze vulnerabilities in cryptographic implementations (including JavaScript libraries and embedded systems) susceptible to timing and side-channel attacks. It specifically targets three categories:

• Insufficient entropy in key generation: Predictability due to weak PRNGs.
• Signature processing manipulations: Bugs in ECDSA implementations.
• Side-channel timing leaks: Variability in execution time of operations revealing key information.

It is designed to be a reproducible research platform for security auditing and formal analysis.

BTCDetect is software designed to recover lost Bitcoin wallets by exploiting vulnerabilities in cryptographic libraries, specifically targeting errors in SharpECC (a C# library for elliptic curve cryptography).

Core Mechanism

BTCDetect primarily relies on nonce generation errors during ECDSA digital signature creation. By analyzing multiple signatures generated with the same private key but flawed nonces, the software can calculate the private key itself.

Capabilities

Recovering a private key via BTCDetect grants full control over the associated Bitcoin address, enabling:

• Creating and signing transactions to withdraw all funds.
• Importing the key into standard wallets (Electrum, Bitcoin Core, MetaMask, etc.).
• Taking complete control of the assets and hiding traces of compromise.

The RingSide Replay Attack (codenamed “Milk Sad”) is a cryptanalytic exploit targeting Libbitcoin Explorer (versions 3.0.0–3.6.0). The vulnerability stems from the use of the Mersenne Twister-32 (MT19937) pseudorandom number generator initialized by system time, which reduces the entropy of generated seeds from the required 256 bits to only 32 bits.

This limited entropy allows for the automated recovery of Bitcoin wallet private keys if the approximate creation time of the wallet is known. The attack has been used to compromise over 227,200 Bitcoin addresses and significant amounts of crypto assets across multiple chains (BTC, ETH, XRP, DOGE, SOL, LTC, BCH, ZEC).

pyaes is a pure-Python implementation of the AES block cipher algorithm and common modes of operation (CBC, CFB, CTR, ECB, and OFB). It has no external dependencies and supports Python 2.x and 3.x.

Note for Python 3 users: You must pass in bytes(), not strings, when using the API.

The Coinbase Wallet Blockchain API allows developers to build applications that interact directly with the Bitcoin network. Key capabilities include:

• Data Access: Retrieve information about transactions, blocks, and addresses.
• Asset Management: Enable users to send, receive, and track Bitcoin transactions.
• Security: Leverage advanced encryption and direct blockchain verification for transparency.
• dApp Development: Build decentralized applications (dApps) for DeFi, smart contracts, and supply chain management.

To use the API, you must obtain an API key from your Coinbase account via the "API Keys" page in the "Settings" section.

The Insight REST API is an open-source interface for interacting with the Bitcoin network. It allows developers to access core blockchain data and perform operations without running a full node locally.

Key Capabilities:

• Blocks & Transactions: Retrieve data about the latest blocks, specific blocks (by hash or height), and transaction details.
• Address Management: Check balances, view received/sent transactions, and list associated addresses (inputs/outputs).
• Transaction Operations: Send new transactions to the network and retrieve status/details of existing ones.
• Network Statistics: Access data like overall balance, hashrate, and difficulty, as well as node (peer) status.

Insight is built on Node.js and utilizes libraries like Bitcore to provide a robust interface for blockchain research and application development.

This project provides a cryptanalytic analysis and demonstration of the security properties of the secp256k1 elliptic curve. It focuses on the distinction between mathematical curve design and implementation-level vulnerabilities.

Key concepts covered include:

• MOV Attack Resistance: Verifying resistance via the embedding degree $k$.
• Pohlig–Hellman Resistance: Verifying the primality of the group order $n$.
• GLV Endomorphism: Demonstrating the Gallant–Lambert–Vanstone (GLV) endomorphism which provides a Pollard rho speedup of approximately 2.
• Invalid Curve Attacks: Demonstrating how the lack of point-membership verification allows an attacker to introduce low-order points on different curves to recover secret scalars using the Chinese Remainder Theorem (CRT).

The project includes demo scripts designed for Google Colab to perform these audits and attacks.