Bitcoin Forum
March 28, 2024, 10:42:23 PM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: are our word phrases safe from dictionary attacks?  (Read 255 times)
CloudCoinR (OP)
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
September 28, 2017, 05:18:32 PM
 #1


can you please explain me the point of the word phrases of the clients and hardware wallets?

shouldn't it be way to easy to get access with a dictionary attack?
"There should not be any signed int. If you've found a signed int somewhere, please tell me (within the next 25 years please) and I'll change it to unsigned int." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711665743
Hero Member
*
Offline Offline

Posts: 1711665743

View Profile Personal Message (Offline)

Ignore
1711665743
Reply with quote  #2

1711665743
Report to moderator
Panda Trump
Sr. Member
****
Offline Offline

Activity: 588
Merit: 254



View Profile WWW
September 28, 2017, 05:26:27 PM
 #2


can you please explain me the point of the word phrases of the clients and hardware wallets?

shouldn't it be way to easy to get access with a dictionary attack?
Let's say you got 1000 words, which is still on the low end. I think there are many thousands of words per thing? Anyhow, let's take the 1000 words per dictionary example.

If you got a word phrase of 10 words, that makes 1000^10 possibilities. 1000 = 10^3, so that makes 10^30 possibilities... Just for your information, that's: 1,000,000,000,000,000,000,000,000,000,000 possibilities. If you could check a QUINTILLION possibilities per second, which is 1,000,000,000,000,000,000 , it would still take 10^12 or about 1 trillion seconds (= 30,000 years) to arrive at the right phrase.

So, I wish you good luck with:
1. Making a computer that can try each word so many times per second.
2. Living for 30,000 years.
3. Getting your victim not to change their passphrase for 30,000 years.
4. Making Bitcoin (or your wanted cryptocurrency) survive for 30,000 years.

Regards,
Trump

CloudCoinR (OP)
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
September 28, 2017, 06:04:50 PM
 #3

thanks trump,

this sounds good to me.
one thing, if i got it right you are calculating the time to hack one specific wallet.
along the way another random wallet should open first, right?
Bitfort
Sr. Member
****
Offline Offline

Activity: 952
Merit: 339

invest trade and gamble wisely


View Profile
September 28, 2017, 06:15:42 PM
 #4

thanks trump,

this sounds good to me.
one thing, if i got it right you are calculating the time to hack one specific wallet.
along the way another random wallet should open first, right?

From the opposite point of view. Take the "100/number of possibilities" and you have the percentual chance hitting already used wallet.

MY HINTs
◄M► MINING
◄G► GAMBLING
◄E► EXCHANGE

◄E► (KCS) Kucoin-Staking, Auto-Lending, Trading-Bot
◄E► (BNB) Binance-Staking, Savings, 10% RefBack
◄E► (TRX) Poloniex-Staking, Lending, Fee Discount
◄E► (LEO) Bitfinex-Staking, Auto-Lending

◄G► Betfury-Faucet, Dividend Earnings (BFG holders, mine BFG by playing)
◄G► Bitvest -  Faucet, Bankroll Invest
◄G► CryptoGames-Faucet, Lotto
◄G► PrimeDice-Faucet

◄M► Prohashing (Multipool)-Payout in any coin, get 0.50% bonus for 30 days
◄M► MiningRigRentals (Marketplace)-buy hashrate or rent your miners
◄M► Viabtc  (Pool)-payout to Coinex (exchnage) without fees


Panda Trump
Sr. Member
****
Offline Offline

Activity: 588
Merit: 254



View Profile WWW
September 28, 2017, 06:24:54 PM
 #5

thanks trump,

this sounds good to me.
one thing, if i got it right you are calculating the time to hack one specific wallet.
along the way another random wallet should open first, right?

True, but how would you be checking each of these wallets?

Let's say you can check 10 time per second (just as example). You could choose to guess the passphrase of 1 wallet 10 times or the passphrase of 10 wallets 1 time (or 5 times of 2 wallets... Etc etc!)
Obviously, that would mean it doesn't matter.

Note that this is just my understanding of this and it might be inaccurate, though I highly doubt a system could be devised that can check multiple wallets in 1 guess, as that would obviously make hacking millions of accounts childs play.

KylesmomisaB
Full Member
***
Offline Offline

Activity: 194
Merit: 100


Toplancer.co | PreSale is LIVE | Get Your Bonus


View Profile
September 28, 2017, 06:32:34 PM
 #6

The point is extra security on top of your PIN or encryption. If you were speaking about Trezor specifically then you should know that they have an additional two safety features present.

1) Can add a passphrase (so even if got seed they also need the passphrase which is next to impossible)
2) Every wrong pin given you have the wait increases by ^2. One wrong answer is a few seconds, twenty wrong and its a week, thirty wrong its 17 years. As you can see this is quite secure

TOPLANCER.CO
Zero commission, Escrow payment & Dispute Settlements
PreSale GET YOUR BONUS JOIN NOW
CloudCoinR (OP)
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
September 28, 2017, 06:40:25 PM
 #7

so the hardware wallets are safe.
easiest would be to guess the 12 words electrum seed phrase.
if the phrase exists its wallet is owned by the hacker.
possible word combos / existing wallets.
CloudCoinR (OP)
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
September 30, 2017, 01:26:32 AM
 #8


check this out Shocked
https://lbc.cryptoguru.org/trophies
dlhezter
Full Member
***
Offline Offline

Activity: 434
Merit: 100


View Profile
September 30, 2017, 02:47:26 AM
 #9


can you please explain me the point of the word phrases of the clients and hardware wallets?

shouldn't it be way to easy to get access with a dictionary attack?

word phrases are the secret word to get you access on your bitcoin wallets. without this (secret word) theres a chance to get you hacked, or loose your bitcoin in an instant. its too impossible to get you hacked or hackers get access to your wallet with a dictionary attack, because the 12 word phrases are random characters from some of things we knew in this world so its a big puzzle to solve before they got you hacked (you bitcoin wallet)
CloudCoinR (OP)
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
September 30, 2017, 02:57:49 AM
 #10


what are you talking about Grin we are a long time and many posts beyond that point Tongue
check out the link and understand. someone is already doing it!
he has a own thread @ bitcointalk for his project, too.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!