Bitcoin Forum

Bitcoin => Electrum => Topic started by: Bizmark13 on February 07, 2015, 10:35:42 AM



Title: Are addresses generated from a single Electrum seed linkable?
Post by: Bizmark13 on February 07, 2015, 10:35:42 AM
For example, if a single Electrum seed was used to deterministically generate address A and address B, would it be possible to somehow link the two addresses together and deduce that they are both owned by the same individual? (Of course this is assuming that both addresses are kept separate with no mixing of coins occurring between them.)


Title: Re: Are addresses generated from a single Electrum seed linkable?
Post by: dabura667 on February 07, 2015, 10:47:20 AM
No.


Title: Re: Are addresses generated from a single Electrum seed linkable?
Post by: redsn0w on February 07, 2015, 10:47:59 AM
For example, if a single Electrum seed was used to deterministically generate address A and address B, would it be possible to somehow link the two addresses together and deduce that they are both owned by the same individual? (Of course this is assuming that both addresses are kept separate with no mixing of coins occurring between them.)

No I don't think , there is a good privacy.


Title: Re: Are addresses generated from a single Electrum seed linkable?
Post by: btchris on February 07, 2015, 02:36:40 PM
For example, if a single Electrum seed was used to deterministically generate address A and address B, would it be possible to somehow link the two addresses together and deduce that they are both owned by the same individual? (Of course this is assuming that both addresses are kept separate with no mixing of coins occurring between them.)

Assuming, of course, that your adversary does not have access to your master public key, deducing that the two addresses were produced from the same seed is roughly as difficult (mathematically) as stealing bitcoin from those addresses. It would involve solving four SHA256 preimages and the two discrete logarithms (which is what secures transaction signatures in bitcoin), and would in the process give the attacker access to your master private key as well.

If it were possible, there'd be far worse problems to be worrying about....