Bitcoin Forum
December 09, 2016, 12:00:44 PM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: WalletCrypt - Windows Wallet Protection  (Read 1068 times)
Departure
Member
**
Offline Offline

Activity: 116



View Profile
August 09, 2011, 09:17:47 AM
 #1

After all the drama's with on-line wallet services, I finally decided to have my own wallet, Only problem there is so many topics about wallet stealing trojans. Hence the start of this simple but useful project that will help protect your wallet while your not using it. It total scrambles your wallet.dat in a single or combination of Encryption algorithms and a option to compress the encrypted wallet. It uses a pass word pharse to Decrypt the wallet and restore it back to its original state. Nothing real special but handy never the less. Full source code will available after releasing the first version(I need to setup a git account).

SnapShot:


Current Features:
* RC4
* MD5
* SHA
* Vigenere (my own custom implementation for encrypting the pass word pharse)
* Compression

Up coming Features:
* Append Encrypted wallet to EOF of WalletCrypt.exe (This will provide portable encryption, where ever the program goes so does your wallet)
* Auto Detect wallet location
* Decrypt and place in original wallet location
* Detect closure of bitcoin client then Encrypt automatically after closed(optional).

Info:
I have basic knowledge of reverse engineering(6 years) dealing with reversing encryption algorithms(a.k.s keygenning), I dont claim this will be 100% protection for your wallet due to it being decrypted to its original state when in use. But my small amount of time/knowledge I have in this field should assure you that the encrypted wallet will not be broken if using pass pharse with 12+ characters, Ontop of that is multiple encryption algo's which are basic but when combined in it should be just about impossible to decrpyt unless the attacker knows what algo and uses a brute forcer which would then be pointless due to the password length.

If you have suggestions or ideas this is the topic to submit them, I use this personally for my own bitcoin wallet and thought it might be useful to other windows users. Its coded in Delphi and source will be available once the project is released to public.


   

1481284844
Hero Member
*
Offline Offline

Posts: 1481284844

View Profile Personal Message (Offline)

Ignore
1481284844
Reply with quote  #2

1481284844
Report to moderator
1481284844
Hero Member
*
Offline Offline

Posts: 1481284844

View Profile Personal Message (Offline)

Ignore
1481284844
Reply with quote  #2

1481284844
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481284844
Hero Member
*
Offline Offline

Posts: 1481284844

View Profile Personal Message (Offline)

Ignore
1481284844
Reply with quote  #2

1481284844
Report to moderator
1481284844
Hero Member
*
Offline Offline

Posts: 1481284844

View Profile Personal Message (Offline)

Ignore
1481284844
Reply with quote  #2

1481284844
Report to moderator
1481284844
Hero Member
*
Offline Offline

Posts: 1481284844

View Profile Personal Message (Offline)

Ignore
1481284844
Reply with quote  #2

1481284844
Report to moderator
bitfreak!
Legendary
*
Offline Offline

Activity: 1514


electronic [r]evolution


View Profile WWW
August 09, 2011, 01:15:05 PM
 #2

Looks cool. But how exactly do you decrypt md5?

XCN: CYsvPpb2YuyAib5ay9GJXU8j3nwohbttTz | BTC: 18MWPVJA9mFLPFT3zht5twuNQmZBDzHoWF
Cryptonite - 1st mini-blockchain altcoin | BitShop - digital shop script
Web Developer - PHP, SQL, JS, AJAX, JSON, XML, RSS, HTML, CSS
Cellcote
Newbie
*
Offline Offline

Activity: 22


View Profile
August 09, 2011, 02:33:23 PM
 #3

Looks cool. But how exactly do you decrypt md5?
+1, md5 isn't a form of encryption, it's hashing. Same with SHA btw.

1Abk6GSZSP6kYbk6opzBXNR1WTVv9NtfH9
Xephan
Jr. Member
*
Offline Offline

Activity: 42


View Profile
August 09, 2011, 02:39:52 PM
 #4

Looks cool. But how exactly do you decrypt md5?

That's the point somebody-else-in-another-thread is making. Since MD5 and SHA are both one-way hash, encrypting the wallet using them would make it irrecoverable. Which implies WalletCrypt might not be doing what it claims to be doing aka wallet theft alert.

186q9YUW3x8TVHC5aYBEqgZZYMxft8Cw9f
jackjack
Hero Member
*****
Offline Offline

Activity: 882


May Bitcoin be touched by his Noodly Appendage


View Profile
August 09, 2011, 02:42:40 PM
 #5

Looks cool. But how exactly do you decrypt md5?
+1, md5 isn't a form of encryption, it's hashing. Same with SHA btw.
+2
This makes me suspicious
Quote
WalletCrypt: Encrypt your wallet, never retrieve it


Quote from: OP
After all the drama's with on-line wallet services, I finally decided to have my own wallet steal your coins too
Fix'd

Own address: 19QkqAza7BHFTuoz9N8UQkryP4E9jHo4N3 - Pywallet support: 1AQDfx22pKGgXnUZFL1e4UKos3QqvRzNh5 - Bitcointalk++ script support: 1Pxeccscj1ygseTdSV1qUqQCanp2B2NMM2
Pywallet: instructions. Encrypted wallet support, export/import keys/addresses, backup wallets, export/import CSV data from/into wallet, merge wallets, delete/import addresses and transactions, recover altcoins sent to bitcoin addresses, sign/verify messages and files with Bitcoin addresses, recover deleted wallets, etc.
bitlotto
Hero Member
*****
Offline Offline

Activity: 672


BitLotto - best odds + best payouts + cheat-proof


View Profile WWW
August 09, 2011, 02:56:16 PM
 #6

Well I guess if he releases the code then people can at least compile it themselves and compare it to what he is providing as a binary. The hashes part seem odd. Perhaps he's hashing the password then encrypting? It may be better to overwrite then delete. Although deleting wallets always makes me nervous...

*Next Draw Feb 1*  BitLotto: monthly raffle (0.25 BTC per ticket) Completely transparent and impossible to manipulate who wins. TOR
TOR2WEB
Donations to: 1JQdiQsjhV2uJ4Y8HFtdqteJsZhv835a8J are appreciated.
EricJ2190
Full Member
***
Offline Offline

Activity: 134


View Profile
August 09, 2011, 05:28:41 PM
 #7

The use of hash functions seems off to me, too. Maybe they are for key derivation? If so, then what algorithm do you use for the actual encryption?

Also, a custom crypto algorithm? This is a well known bad idea. Based on the name I assume it uses a Vigenère cipher which is not secure.
NothinG
Hero Member
*****
Offline Offline

Activity: 560



View Profile
August 09, 2011, 07:43:07 PM
 #8

Post Sauce of I'm considering this a dropper Cheesy

InstaGx
Member
**
Offline Offline

Activity: 70



View Profile
August 09, 2011, 07:51:07 PM
 #9

Post Sauce of I'm considering this a dropper Cheesy

He hasn't posted the binaries either. So I guess we wait for him to provide both as he promised. Then we will analyze it.

A screenshot of the GUI isn't enough to say if it's legit or not.


Buy High - Sell Low
error
Hero Member
*****
Offline Offline

Activity: 574



View Profile
August 09, 2011, 07:53:52 PM
 #10

This is pretty obviously a joke to anyone with even basic knowledge of crypto. However, most non-technical people won't be able to evaluate it properly and reach this conclusion.

15UFyv6kfWgq83Pp3yhXPr8rknv9m6581W
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!