Bitcoin Forum
September 25, 2024, 07:48:23 PM *
News: Latest Bitcoin Core release: 27.1 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Bitcoin / Wallet software / Re: How secure is a brain wallet with a randomly generated password? on: January 23, 2023, 04:00:45 PM
Thanks, so I will do the following then, as BIP39 describes:
  • Generate the initial entropy
  • Create the seed using the mnemonic + a passphrase
With those additional steps:
  • Store the mnemonic in a QR Code
  • Print it and paste it on the gift
2  Bitcoin / Wallet software / Re: How secure is a brain wallet with a randomly generated password? on: January 23, 2023, 11:05:26 AM
Hello,

I don't want to reinvent the wheel => this is why I tried to start from something existing I knew (the warp wallet) and why I post on this forum, so I can learn about stuff like the extra word in BIP 39  Smiley
So, thanks a lot for your feedback.

Pooya perfectly summarized it, right now my algorithm creates 256 bits of entropy and the password only add a bit more.
Actually, this is BIP39 + passphrase but with argon2 instead of pbkdf2 and a QR code instead of a wordlist.

I asked my girlfriend to create a 8+ letters passphrase, let's say I use BIP39, send 100 USD and post here the mnemonic, as if the qr code would have been compromised.
Do you think the cost to brute force would be low enough so people will try?
Do you think it would make a big difference if I use argon2 instead of pbkdf2? (I understand this would break compatibility)

thanks
3  Bitcoin / Wallet software / Re: How secure is a brain wallet with a randomly generated password? on: January 18, 2023, 03:37:15 PM
Thanks for all your replies,

Quote
displaying a QR code of the seed phrase, then the security of your wallet is reduced to only that of your weak human-generated password

So you think the warp wallet algorithm with argon2 and pbkdf2 does not strengthen it enough?
We are talking about wallets of 20-50 USD. I would have thought that even with the QR code stolen, brute forcing would cost too much.

Quote
BIP38 encryption
Yes this sounds a great idea, I should use BIP38 instead of my proposed algorithm, then?


Quote
"physical" Bitcoin

I want to offer this also to my friends, a different present for each of them.
I already offered a funkopop with a QR code to a friend and he was very happy to have crypto money.
Think of a painting for someone, a key chain for another etc. All of them with a QR code.

Quote
how are you going to remember the random seed
Quote
qr code / bip39

The random seed is the QR code.
I felt the QR code is more friendly to print on something and more friendly when you scan it.

Quote
Make sure someone other than you knows how to get to the funds
Yes, I want to open-source the algorithm.
I was also thinking of a website, you load it, get offline and then you can scan the QR code and enter your password, to get your private key.

The idea is not to create a multipurpose wallet, this is more like "my first crypto", so people can enter the crypto world, lose their fear about it and then maybe one day will get serious with other wallets.
4  Bitcoin / Wallet software / Re: How secure is a brain wallet with a randomly generated password? on: January 18, 2023, 09:53:05 AM
Hello Charles,

This is because I want to give her not only the QR code, but a nice object with the QR printed on it.

So she can "feel" it, something she could put in her home and show her hosts she now has bitcoins.
5  Bitcoin / Wallet software / How secure is a brain wallet with a randomly generated password? on: January 18, 2023, 08:57:20 AM
Hello,

I plan to create a brain wallet by doing the following:

* Create securely a random seed and print its QR code
* Use the https://keybase.io/warp/warp_1.0.9_SHA256_a2067491ab582bde779f4505055807c2479354633a2216b22cf1e92d1a6e4a87.html algorithm  with my seed as the password and a classic/human-made/weak password (that my mother can remember) as the salt.
* Instead of using Scrypt, use argon2
* Generate a wallet
* Send some satoshis
* Give the QR code to my mum as a gift

Do you think it is secure enough?

Thanks
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!