Verifying generated offline bitcoin addresses

[samadamsbeer]

I know I can save bitaddress.org to a hard drive for use as an offline address generator. If I want to double or triple check seeded key pairs from bitaddress, what other offline methods can I use to confidently verify the bitaddress pairs? I'm worried about errors and malicious code. Ideally the tools used would have independent development and not be based on the same flawed/malicious component source code.

[charliemaggot]

Open up brainwallet.org in your browser, it's a javascript only site. Disconnect your internet. In the Generator page, click on the Private Key button and paste your key into the appropriate field. Verify you see the same address. Close page. Reconnect internet.

[CIYAM]

I would advise you to use a computer that *never* connects to the internet to do this.

Browsers often save forms without you even being aware of it so just disconnecting and later reconnecting is not necessarily safe at all.

[samadamsbeer]

Agreed on never connecting to the internet and using a temporarily loaded OS. On brainwallet.org - I thought I remember some threads here questioning that site since no one knew who created it. Do we now know the source?

[CIYAM]

If you are using brainwallet.org then about the only thing you need to trust is that they have done the math correctly (i.e. that the address is correctly derived from the private key) and you are concerned about that then you might want to put both bitaddress and brainwallet in your offline distro.

[Severian]

no one knew who created it.

But Bitcoin is ok? 

CIYAM's got the ticket: use both tools to check each other's work until you trust the process.