Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: cuddaloreappu on June 25, 2014, 04:32:37 PM



Title: I want to encrypt the private key, which method is best?
Post by: cuddaloreappu on June 25, 2014, 04:32:37 PM
I want to encrypt the private key, but which method is best, time-tested and easy to encrypt such a using passphrase.

Is pgp good or bip38 best?

where should i download a PGP encrypt and how do i encrypt?

please help


Title: Re: I want to encrypt the private key, which method is best?
Post by: Dare on June 25, 2014, 07:26:22 PM
I want to encrypt the private key, but which method is best, time-tested and easy to encrypt such a using passphrase.

Is pgp good or bip38 best?

where should i download a PGP encrypt and how do i encrypt?

please help

From my experience, bip38 is pretty secure, as long as you use a long and complex enough passphrase. If you use a few unicode characters, it's nearly unbreakable at this point; there's currently a challenge going on on Reddit that's been around a few months for crack a bip38 wallet encrypted with a few unicode characters (not stated, but all of ASCII has been bruteforced already), despite the prize being around 1BTC. I've seen PGP around enough that I believe it's secure, but I don't currently use it so I can't say for sure.


Title: Re: I want to encrypt the private key, which method is best?
Post by: DannyHamilton on June 25, 2014, 08:20:00 PM
all of ASCII has been bruteforced already

???

What are you talking about?


Title: Re: I want to encrypt the private key, which method is best?
Post by: Dare on June 25, 2014, 08:51:26 PM
all of ASCII has been bruteforced already

???

What are you talking about?

For the specific wallet posted for the Reddit challenge the sentence is about. Most people gave up after finishing the ASCII set, because it took several weeks and the Unicode keyspace was too large to search in a reasonable amount of time. The only clue for the challenge was the the passphrase was four characters, and the creator of the wallet didn't state that it included Unicode.


Title: Re: I want to encrypt the private key, which method is best?
Post by: DannyHamilton on June 25, 2014, 08:55:55 PM
all of ASCII has been bruteforced already

???

What are you talking about?

For the specific wallet posted for the Reddit challenge the sentence is about. Most people gave up after finishing the ASCII set, because it took several weeks and the Unicode keyspace was too large to search in a reasonable amount of time. The only clue for the challenge was the the passphrase was four characters, and the creator of the wallet didn't state that it included Unicode.

Ah, ok.

So in the reddit challenge, the exact number of characters in the password are publicly known?


Title: Re: I want to encrypt the private key, which method is best?
Post by: TookDk on June 25, 2014, 09:03:29 PM
I want to encrypt the private key, but which method is best, time-tested and easy to encrypt such a using passphrase.

Is pgp good or bip38 best?

where should i download a PGP encrypt and how do i encrypt?

please help

TrueCrypt is a good place to start.
It is fairly easy to use and there is good documentation to get started.
You can make a file-container for your secret key and encrypt it with AES-256 bit.
You can also encrypt an entire drive, e.g. a USB drive.


Title: Re: I want to encrypt the private key, which method is best?
Post by: Dare on June 25, 2014, 09:04:39 PM
all of ASCII has been bruteforced already

???

What are you talking about?

For the specific wallet posted for the Reddit challenge the sentence is about. Most people gave up after finishing the ASCII set, because it took several weeks and the Unicode keyspace was too large to search in a reasonable amount of time. The only clue for the challenge was the the passphrase was four characters, and the creator of the wallet didn't state that it included Unicode.

Ah, ok.

So in the reddit challenge, the exact number of characters in the password are publicly known?

Correct, the contest was created to see how long it would take to crack. As of today, the bounty is still unclaimed.

Here's the link to it, if you're interested: http://www.reddit.com/r/Bitcoin/comments/1zkcya/lets_see_how_long_it_takes_to_crack_a_4_digit/ (I know it says digit in the title, the poster quickly clarified that it was a mistake and that it's 4 characters)


Title: Re: I want to encrypt the private key, which method is best?
Post by: rapsaodan84 on June 25, 2014, 09:12:00 PM
I consider PGP safer if the private certificate has a password. It's kind of 2 factor (certificate file + password). 

But BIP is easier to use. I'd recommend PGP if you plan to store for a long time, otherwise BIP.


Title: Re: I want to encrypt the private key, which method is best?
Post by: cuddaloreappu on June 26, 2014, 01:24:12 AM
thanks for all your kind replies


Title: Re: I want to encrypt the private key, which method is best?
Post by: BTCINVESTOR on July 02, 2014, 12:13:23 AM
PGP


Title: Re: I want to encrypt the private key, which method is best?
Post by: -ck on July 03, 2014, 06:57:49 AM
I use lrzip, but then I wrote it so I'm biased.


Title: Re: I want to encrypt the private key, which method is best?
Post by: Bernard Lerring on July 05, 2014, 04:40:13 AM
If you encrypt your private key using PGP then you put yourself in a position where you have to store an extra file securely: your PGP key.

So now you have a Bitcoin key and a PGP key that must be hidden.

If you use BIP then you rely on blockchain.info staying compliant with current BIP standard in X amount of years time (and not being hacked/going out of business).

Why complicate things? Just put your (unencrypted) keys on pieces of paper somewhere that they are least likely to be found. Keep an exact copy in a loved ones house and if either of you gets burgled get your keys out ASAP and quickly move all funds to a new, temporary wallet.