|
Title: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: abhilodha on July 18, 2019, 02:28:41 PM in bitadress.org in brain wallet when i type passphrase "satoshi nakamoto" it generates privatekey different than what a normal sha256 online calculator generates. Why sha 256 of bitaddress gives different private key than a normal sha256..
below is example https://i.imgur.com/2EPUBWw.jpg https://i.imgur.com/vrerpiP.jpg private keys generated by both for same phrase iBTCs different WHY?? Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: AGD on July 18, 2019, 03:44:52 PM Because a Bitcoin private key is not only a sha256 hash:
https://en.bitcoin.it/wiki/Private_key Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: Thirdspace on July 18, 2019, 11:57:59 PM private keys generated by both for same phrase iBTCs different WHY?? they are the same, you are just looking at different private key formats the one you get from bitaddress is a standard WIF (Wallet Import Format) private key, as the name suggested, this is commonly used for importing privkey-address pair into a wallet the plain SHA256 gives you a HEX (HEXadecimal) private key this can be used to import too, but I think not many wallets support importing this format Besides private Key provided by bitaddress.org uses Base58 format, not Hexadecimal which used by SHA-256 output. OP can enter the WIF privkey in the "Wallet Details" tab on bitaddress.org to view all details it will show all equivalent privkeys in different "Key Formats: WIF, WIFC, HEX, B64, B6, MINI, BIP38" we can see the AA2D3C4A4A... HEX privkey listed second from the bottom ;) 8) Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: pooya87 on July 19, 2019, 04:30:57 AM i hope you realize that using brainwallet like that is the worst thing you can do for generating a new private key because brainwallets are known to be insecure because people are rarely capable of creating a truly random "passphrase". so know that if you decided to create a paper wallet with a password there is a very good chance that someone is going to steal your funds pretty easily.
Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: odolvlobo on July 19, 2019, 05:50:29 AM i hope you realize that using brainwallet like that is the worst thing you can do for generating a new private key because brainwallets are known to be insecure because people are rarely capable of creating a truly random "passphrase". so know that if you decided to create a paper wallet with a password there is a very good chance that someone is going to steal your funds pretty easily. Yeah. This is one of my favorite threads on this site: Collection of 18.509 found and used Brainwallets (https://bitcointalk.org/index.php?topic=4768828.0) Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: Nadziratel on July 19, 2019, 06:02:04 AM i hope you realize that using brainwallet like that is the worst thing you can do for generating a new private key because brainwallets are known to be insecure because people are rarely capable of creating a truly random "passphrase". so know that if you decided to create a paper wallet with a password there is a very good chance that someone is going to steal your funds pretty easily. Yeah. This is one of my favorite threads on this site: Collection of 18.509 found and used Brainwallets (https://bitcointalk.org/index.php?topic=4768828.0) Woow woow woowwww... So paper wallets from this websites is not safe? I used many wallets from bitadress and never happen bad incident. Well, how can we create a really "safe" Bitcoin wallet then? Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: odolvlobo on July 19, 2019, 06:16:05 AM i hope you realize that using brainwallet like that is the worst thing you can do for generating a new private key because brainwallets are known to be insecure because people are rarely capable of creating a truly random "passphrase". so know that if you decided to create a paper wallet with a password there is a very good chance that someone is going to steal your funds pretty easily. Yeah. This is one of my favorite threads on this site: Collection of 18.509 found and used Brainwallets (https://bitcointalk.org/index.php?topic=4768828.0)Brain wallets are not safe. Paper wallets are generally ok. The issue here is how the private key is generated, not how it is stored. Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: AGD on July 29, 2019, 07:26:30 AM i hope you realize that using brainwallet like that is the worst thing you can do for generating a new private key because brainwallets are known to be insecure because people are rarely capable of creating a truly random "passphrase". so know that if you decided to create a paper wallet with a password there is a very good chance that someone is going to steal your funds pretty easily. I wouldn't say that brainwallets are bad per se. If you choose a phrase long enough and one, that is not used in any book or lyric or whatever, a brainwallet can be an interesting way to store your value in some situations. Let's say I take an individual very long sentence, which nobody else knows. Now I run a sha256 over it and convert this into a Bitcoin private key. When I send Bitcoins to this address I can access it everywhere I want without even bringing a computer or USB sticks or whatever. I can cross borders with absurd amounts of money and when I want to spend it, I only need the sentence to have access to it. The possibility of someone accessing these funds are very very small. Especially because people don't even know, that I have Bitcoins in a brainwallet. Even if they knew, how would they start looking for these funds? The only way could be torturing me until I give them the phrase. Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: pooya87 on July 29, 2019, 07:35:30 AM i hope you realize that using brainwallet like that is the worst thing you can do for generating a new private key because brainwallets are known to be insecure because people are rarely capable of creating a truly random "passphrase". so know that if you decided to create a paper wallet with a password there is a very good chance that someone is going to steal your funds pretty easily. I wouldn't say that brainwallets are bad per se. If you choose a phrase long enough and one, that is not used in any book or lyric or whatever, a brainwallet can be an interesting way to store your value in some situations. Let's say I take an individual very long sentence, which nobody else knows. Now I run a sha256 over it and convert this into a Bitcoin private key. When I send Bitcoins to this address I can access it everywhere I want without even bringing a computer or USB sticks or whatever. I can cross borders with absurd amounts of money and when I want to spend it, I only need the sentence to have access to it. The possibility of someone accessing these funds are very very small. Especially because people don't even know, that I have Bitcoins in a brainwallet. Even if they knew, how would they start looking for these funds? The only way could be torturing me until I give them the phrase. the problem is in that first step: choosing a long and truly random passphrase that can not be guessed at all. generally speaking people have shown that they will always choose things that can be guessed which makes brainwallets bad in general. otherwise there have been users that created brainwallets and posted the address as a challenge online and it was never broken. if someone insists on using brainwallets then i can only suggest using some other method other than a simple SHA256 on it. something unique that nobody knows. that way to steal the funds the hacker has to find 2 things: the random long passphrase and the hash algorithm. for example you could use a KDF function such as scrypt with custom settings (eg. n=2048, r=5, p=2) and derive a 32 byte key from that. or using SHA3-256, SHA512/256, Blake2b-256,... the list goes on. ps. BIP39 is also worth mentioning here as it is a mnemonic which is a set of words in any language which you could memorize instead of a brainwallet. it is harder but it much safer since they represent a good random entropy. this could also solve the "torture" problem as you could add a single "word" to the list as its extension so you have 1 mnemonic but two wallets. the wallet with the mnemonic can contain a small amount that you could reveal under torture! and the wallet with mnemonic+passphrase contains the actual funds. => good for paranoid people. Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: muslol67 on July 29, 2019, 08:39:00 AM in bitadress.org in brain wallet when i type passphrase "satoshi nakamoto" it generates privatekey different than what a normal sha256 online calculator generates. Why sha 256 of bitaddress gives different private key than a normal sha256.. below is example https://i.imgur.com/2EPUBWw.jpg https://i.imgur.com/vrerpiP.jpg private keys generated by both for same phrase iBTCs different WHY?? Everyone's talking about bitadress. I don't think it's safe. Then tell me where can we get the most reliable BTC wallet? Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: Micerker on July 29, 2019, 09:02:24 AM in bitadress.org in brain wallet when i type passphrase "satoshi nakamoto" it generates privatekey different than what a normal sha256 online calculator generates. Why sha 256 of bitaddress gives different private key than a normal sha256.. below is example https://i.imgur.com/2EPUBWw.jpg https://i.imgur.com/vrerpiP.jpg private keys generated by both for same phrase iBTCs different WHY?? Everyone's talking about bitadress. I don't think it's safe. Then tell me where can we get the most reliable BTC wallet? Title: Re: Bittaddress.org brainwallet passphrase is NOT sha256 Post by: AGD on July 29, 2019, 09:04:55 AM i hope you realize that using brainwallet like that is the worst thing you can do for generating a new private key because brainwallets are known to be insecure because people are rarely capable of creating a truly random "passphrase". so know that if you decided to create a paper wallet with a password there is a very good chance that someone is going to steal your funds pretty easily. I wouldn't say that brainwallets are bad per se. If you choose a phrase long enough and one, that is not used in any book or lyric or whatever, a brainwallet can be an interesting way to store your value in some situations. Let's say I take an individual very long sentence, which nobody else knows. Now I run a sha256 over it and convert this into a Bitcoin private key. When I send Bitcoins to this address I can access it everywhere I want without even bringing a computer or USB sticks or whatever. I can cross borders with absurd amounts of money and when I want to spend it, I only need the sentence to have access to it. The possibility of someone accessing these funds are very very small. Especially because people don't even know, that I have Bitcoins in a brainwallet. Even if they knew, how would they start looking for these funds? The only way could be torturing me until I give them the phrase. the problem is in that first step: choosing a long and truly random passphrase that can not be guessed at all. generally speaking people have shown that they will always choose things that can be guessed which makes brainwallets bad in general. otherwise there have been users that created brainwallets and posted the address as a challenge online and it was never broken. if someone insists on using brainwallets then i can only suggest using some other method other than a simple SHA256 on it. something unique that nobody knows. that way to steal the funds the hacker has to find 2 things: the random long passphrase and the hash algorithm. for example you could use a KDF function such as scrypt with custom settings (eg. n=2048, r=5, p=2) and derive a 32 byte key from that. or using SHA3-256, SHA512/256, Blake2b-256,... the list goes on. ps. BIP39 is also worth mentioning here as it is a mnemonic which is a set of words in any language which you could memorize instead of a brainwallet. it is harder but it much safer since they represent a good random entropy. this could also solve the "torture" problem as you could add a single "word" to the list as its extension so you have 1 mnemonic but two wallets. the wallet with the mnemonic can contain a small amount that you could reveal under torture! and the wallet with mnemonic+passphrase contains the actual funds. => good for paranoid people. So peoples education is the problem and not the brainwallet. People have to learn, that a phrase like 'To be or not to be' might not be guessed by a human that fast, but that a good computer can crunch billions of sentences in minutes. If you instead use a phrase like 'To be or not be, I don't fucking care about this shit in 2019.' you probably have a sentence that wouldn't be in any book or wordlist and therefore pretty hard to crack. |
