Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: ozerkovs on February 04, 2014, 05:50:28 AM



Title: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: ozerkovs on February 04, 2014, 05:50:28 AM
I have a philosophical question here about the security of Bitcoin wallets.  I would appreciate anyone that can correct my logic in my thoughts below:

1- The blockchain is a public ledger.  Hence, while we cannot tell who owns the coins, we can tell what public address contains the most coins
2- While it is hard (without the private keys) to create a transaction that transfers BTC from one public address to another, it is easy to confirm that such a transaction is valid if generated with the proper keys.

Suppose that there is an unethical miner with a large amount of GH/s.  He knows that the reward is 25 BTC per block mined.
Now, the miner can see through the blockchain an address (call it XXX) with 250 BTC in it.  Let's assume that the private key is completely secure  (i.e. the legitimate owner has placed her wallet in cold storage or a paper wallet or other very secure mechanism). 

Instead of using the mining power to mine, the miner decides to use it to try to crack the private key of this particular address. 
The miner will simply test random private keys and attempt 1 BTC transfers to some address (say YYY).  The miner does not need to actually broadcast the transfer, based on statement 2 above, the miner can easily verify if the random test private key produces a valid transaction.

After some amount of effort e, the miner will eventually succeed in finding a private key that produces a valid transaction.  At that point the unethical miner can transfer the 250 BTC to his personal account.

As long as the effort e is less that required to mine 10 blocks (250/25) it is better for the miner to attack large wallets than to mine.

Based on the above I can only conclude that there is a value v above which any Bitcoin wallet becomes insecure (due to its vulnerability to attack).  This value is independent of how secure somebody tries to keep their wallet.

Can somebody help me understand the flaws of my logic? 

Thank you


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: patricktim on February 04, 2014, 06:00:44 AM
for me i keep them in a paper wallet.


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: Holliday on February 04, 2014, 06:03:20 AM
http://miguelmoreno.net/wp-content/uploads/2013/05/fYFBsqp.jpg


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: DeathAndTaxes on February 04, 2014, 06:10:52 AM
Can somebody help me understand the flaws of my logic? 

You vast underestimate the amount of energy and time required to brute force a private key, not by a factor of a hundred or a thousand but by a factor of billions and billions.


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: ozerkovs on February 04, 2014, 06:49:55 AM
Thank you for the answers.  I think it makes sense.  Again, please correct me if I am wrong.

1) The current difficulty of mining is 2,193,847,870 which is approximately 2^32
2) A valid transaction paired with the private key and converted into a 2^256 bit long hash.  Hence, brute force approach to crack a password has a difficulty of about 2^256.  Hence mining is 2^234 time easier than cracking a password.

Since there are only 21,000,000 BTC  mining is always more likely to produce better returns than trying to crack a password.

Again, thank you.



Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: seriouscoin on February 04, 2014, 06:59:19 AM
Thank you for the answers.  I think it makes sense.  Again, please correct me if I am wrong.

1) The current difficulty of mining is 2,193,847,870 which is approximately 2^32
2) A valid transaction paired with the private key and converted into a 2^256 bit long hash.  Hence, brute force approach to crack a password has a difficulty of about 2^256.  Hence mining is 2^234 time easier than cracking a password.

Since there are only 21,000,000 BTC  mining is always more likely to produce better returns than trying to crack a password.

Again, thank you.



LOL did you finally take a sec to think? Bravo brother


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: goose20 on February 04, 2014, 07:07:57 AM

Still the best and simplest explanation I've seen :)


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: odolvlobo on February 04, 2014, 07:11:11 AM
With the current difficulty, it takes an average of 9.4x1018 tries to solve a block. It takes on average 2159 tries to guess the private key for a bitcoin address, which is 77,739,448,794,196,963,734,238,554,931 times more difficult. So, if it takes 10 minutes to solve a block, it would take only 1,478,048,688,002,832,225,534,994 years to guess a bitcoin address. Mining looks much more profitable to me even if the block reward is only 1 satoshi.


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: jl2012 on February 04, 2014, 07:17:58 AM
Thank you for the answers.  I think it makes sense.  Again, please correct me if I am wrong.

1) The current difficulty of mining is 2,193,847,870 which is approximately 2^32
2) A valid transaction paired with the private key and converted into a 2^256 bit long hash.  Hence, brute force approach to crack a password has a difficulty of about 2^256.  Hence mining is 2^234 time easier than cracking a password.


And this still underestimates the difference because the ECDSA takes much more steps to calculate than SHA256


Title: Re: Is having amounts larger than 25 BTC in a wallet a security problem?
Post by: Denni on February 04, 2014, 07:26:32 AM
With the current difficulty, it takes an average of 9.4x1018 tries to solve a block. It takes on average 2159 tries to guess the private key for a bitcoin address, which is 77,739,448,794,196,963,734,238,554,931 times more difficult. So, if it takes 10 minutes to solve a block, it would take only 1,478,048,688,002,832,225,534,994 years to guess a bitcoin address. Mining looks much more profitable to me even if the block reward is only 1 satoshi.
Only 1,478,048,688,002,832,225,534,994 years ? Pff, easiest s..t in my life  ;D