Bitcoin Forum
December 05, 2016, 10:43:32 AM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 5 [6] 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 »
  Print  
Author Topic: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key  (Read 109994 times)
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1344


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
October 03, 2011, 04:00:31 AM
 #101

5 BTC donation sent as promised...thanks!  I now use your paper wallets.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper wallets instead.
1480934612
Hero Member
*
Offline Offline

Posts: 1480934612

View Profile Personal Message (Offline)

Ignore
1480934612
Reply with quote  #2

1480934612
Report to moderator
1480934612
Hero Member
*
Offline Offline

Posts: 1480934612

View Profile Personal Message (Offline)

Ignore
1480934612
Reply with quote  #2

1480934612
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1480934612
Hero Member
*
Offline Offline

Posts: 1480934612

View Profile Personal Message (Offline)

Ignore
1480934612
Reply with quote  #2

1480934612
Report to moderator
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 03, 2011, 11:41:30 AM
 #102

5 BTC donation sent as promised...thanks!  I now use your paper wallets.

Thanks!!

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
BkkCoins
Hero Member
*****
Offline Offline

Activity: 784


firstbits:1MinerQ


View Profile WWW
October 05, 2011, 02:16:25 PM
 #103

I see that now MtGox has a new feature allowing importing a private key into your MtGox wallet.

Sounds like this should work really nicely with bitaddress paper wallets for new users to get going without needing a client/blockchain or anything more than just printing a paper wallet. Nice!

pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 06, 2011, 02:14:54 AM
 #104

I see that now MtGox has a new feature allowing importing a private key into your MtGox wallet.

Sounds like this should work really nicely with bitaddress paper wallets for new users to get going without needing a client/blockchain or anything more than just printing a paper wallet. Nice!

Screenshot:





Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
BkkCoins
Hero Member
*****
Offline Offline

Activity: 784


firstbits:1MinerQ


View Profile WWW
October 06, 2011, 02:24:50 AM
 #105

I have an idea for you that was prompted by the thread about printing plastic cards with QR codes on them to use in offline exchanges or promoting Bitcoin.

I think it would be pretty easy to create a tab on your site that would take the QR codes, text and some background image supplied and lay them out in a card format for saving/printing.

It would just take an SVG object element that refers to the QR codes and text with <image /> and <text /> tags. I think I could work that out and give you some sample HTML/JS code if you would be interested. I have worked with SVG before and it works quite well in browsers, though how it could be embedded with JS I'm not 100% sure.

My thought was to right click and save the SVG graphic to print out as a  4"x6" photo since this would allow nice colour graphics and design work to shine. With a background image embed option some really nice card designs could be created that allowed embedding the QR codes right on your page. I could see a user contributed library as possible. (The private key would be a separate  element so that it can be printed separately).

Another idea I had was to incorporate Shamir Secret sharing to break the private key into several QR codes for printing. You would need several QR codes to re-combine a usable private key. This might be on a "Multi-Key" tab perhaps.

pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 06, 2011, 03:47:35 AM
 #106

I have an idea for you that was prompted by the thread about printing plastic cards with QR codes on them to use in offline exchanges or promoting Bitcoin.

I think it would be pretty easy to create a tab on your site that would take the QR codes, text and some background image supplied and lay them out in a card format for saving/printing.

It would just take an SVG object element that refers to the QR codes and text with <image /> and <text /> tags. I think I could work that out and give you some sample HTML/JS code if you would be interested. I have worked with SVG before and it works quite well in browsers, though how it could be embedded with JS I'm not 100% sure.

My thought was to right click and save the SVG graphic to print out as a  4"x6" photo since this would allow nice colour graphics and design work to shine. With a background image embed option some really nice card designs could be created that allowed embedding the QR codes right on your page. I could see a user contributed library as possible. (The private key would be a separate  element so that it can be printed separately).

Another idea I had was to incorporate Shamir Secret sharing to break the private key into several QR codes for printing. You would need several QR codes to re-combine a usable private key. This might be on a "Multi-Key" tab perhaps.

Ahhh.... Brain food. I'll think about that.

I'm still thinking about the private key redeem at MtGox and how awesome that is. I can't even imagine all the possibilities Cheesy

I find that Private Key formats can be a source of confusion. I found this article on the wiki:
https://en.bitcoin.it/wiki/Private_key

It does not describe the "Standard Private Key" that MtGox defines as:
Quote
Standard Private Key: The private key must be 32 bytes encoded in base58

Also, MtGox has a secondary private key format labelled "SHA-256 Private Key (E.g. Casascius Coins)" which appears to be the option if you want to redeem a private key in hex format (Mtgox accepted the 64 character 0-9 A-F sequence... I'm waiting to see if the deposit of BTC works). Also, Casascius Coins use a the mini-private key format. So to use this option with a mini-private key you have to first SHA256(MiniPrivateKey).

This is making me think I should create a tab to convert between different private key formats. I like just showing one private key format on bitaddress to keep things simple otherwise people might think they need both private keys and not realize the two private keys are equivalent and just being shown in a different format. Although, I'd rather contact MtGox and have them add the Sipa Wallet Import Format (WIF), I had to do some manual JavaScript work to convert from WIF to HEX to redeem at MtGox.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
nmat
Hero Member
*****
Offline Offline

Activity: 602


View Profile
October 06, 2011, 03:59:49 AM
 #107

This is making me think I should create a tab to convert between different private key formats. I like just showing one private key format on bitaddress to keep things simple otherwise people might think they need both private keys and not realize the two private keys are equivalent and just being shown in a different format. Although, I'd rather contact MtGox and have them add the Sipa Wallet Import Format (WIF), I had to do some manual JavaScript work to convert from WIF to HEX to redeem at MtGox.

Couldn't you just make a few checkboxes or something?
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1344


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
October 06, 2011, 04:04:46 AM
 #108

Also, MtGox has a secondary private key format labelled "SHA-256 Private Key (E.g. Casascius Coins)" which appears to be the option if you want to redeem a private key in hex format (Mtgox accepted the 64 character 0-9 A-F sequence... I'm waiting to see if the deposit of BTC works). Also, Casascius Coins use a the mini-private key format. So to use this option with a mini-private key you have to first SHA256(MiniPrivateKey).

MtGox takes the 22-character mini string directly.  No conversion is needed.  If you give it hex, it probably took the sha256 of the hex you entered, resulting in no funds.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper wallets instead.
BkkCoins
Hero Member
*****
Offline Offline

Activity: 784


firstbits:1MinerQ


View Profile WWW
October 06, 2011, 04:06:11 AM
 #109

I kind of like the mini-key format but I think the base58 is more universal. I've snapped QR codes on my notebook webcam and they converted back to text fine (using Ubuntu zbarimg tool).

I think a drop-down with key format choices would be a nice way but every option does add confusion for newbies...  If the base58 key works with MtGox then I'd think that is best when no options.

BkkCoins
Hero Member
*****
Offline Offline

Activity: 784


firstbits:1MinerQ


View Profile WWW
October 06, 2011, 04:08:01 AM
 #110

Also, MtGox has a secondary private key format labelled "SHA-256 Private Key (E.g. Casascius Coins)" which appears to be the option if you want to redeem a private key in hex format (Mtgox accepted the 64 character 0-9 A-F sequence... I'm waiting to see if the deposit of BTC works). Also, Casascius Coins use a the mini-private key format. So to use this option with a mini-private key you have to first SHA256(MiniPrivateKey).

MtGox takes the 22-character mini string directly.  No conversion is needed.  If you give it hex, it probably took the sha256 of the hex you entered, resulting in no funds.
Maybe that's why someone was complaining their btc hadn't arrived after 8 confirms. MtGox should probably call it "Mini-Key format" as that makes more sense since it's so short.

pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 06, 2011, 01:14:57 PM
 #111

"SHA-256 Private Key (E.g. Casascius Coins)"
So, I was NOT successful in depositing a HEX private key using that option at MtGox.

They have removed that option, now there are two options that say "Standard Private Key" and it now says it can take up to 2 hours to deposit and before it said 24 hours.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
Stephen Gornick
Legendary
*
Offline Offline

Activity: 1988



View Profile
October 06, 2011, 07:54:46 PM
 #112

Would you put the page you serve into a repo (e.g., GitHub) so that a specific revision can get a closer security review and then each change can be easily identified and scrutinized individually?  

This will help assure that the html/js being served has been reviewed.

casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1344


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
October 06, 2011, 07:58:09 PM
 #113

It would be helpful if MtGox autodetected the key type based on the length.  I'm sure they will at some point, I assume they're monitoring this thread.  It is pretty easy...

Wallet Import Format... 51 base58 characters, always starts with '5'

Hex... 64 characters [0-9A-F]...

Casascius Coins... 22 base58 characters, always starts with 'S'...

The javascript in the page could be the agent that converts all these forms to a single format accepted by MtGox's API call...

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper wallets instead.
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 08, 2011, 01:21:47 PM
 #114

Would you put the page you serve into a repo (e.g., GitHub) so that a specific revision can get a closer security review and then each change can be easily identified and scrutinized individually?  

This will help assure that the html/js being served has been reviewed.

I'll think about it. More scrutiny is definitely a good thing.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
BurtW
Legendary
*
Offline Offline

Activity: 1778

All paid signature campaigns should be banned.


View Profile WWW
October 08, 2011, 01:58:09 PM
 #115

It would be helpful if MtGox autodetected the key type based on the length.  I'm sure they will at some point, I assume they're monitoring this thread.  It is pretty easy...

Wallet Import Format... 51 base58 characters, always starts with '5'

Hex... 64 characters [0-9A-F]...

Casascius Coins... 22 base58 characters, always starts with 'S'...

The javascript in the page could be the agent that converts all these forms to a single format accepted by MtGox's API call...

The Mt. Gox site now autodetects the private key format.  It is working for hex keys and mini private keys but there currently is a bug in the WIF conversion.  See:

https://bitcointalk.org/index.php?topic=46908.msg561163#msg561163
https://bitcointalk.org/index.php?topic=46908.msg561803#msg561803


Our family was terrorized by Homeland Security.  Read all about it here:  http://www.jmwagner.com/ and http://www.burtw.com/  Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
phathash
Member
**
Offline Offline

Activity: 75


View Profile
October 10, 2011, 09:28:46 AM
 #116

Is there any known reason why this does not work in mobile safari? The gen key function seems to be called and the CPU seems to be chugging along for 4-5s but nothing is displayed past "move your mouse". I tried to step through the js execution and think the script halted at one one of underlying crypto functions.   
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 10, 2011, 11:58:16 AM
 #117

Is there any known reason why this does not work in mobile safari? The gen key function seems to be called and the CPU seems to be chugging along for 4-5s but nothing is displayed past "move your mouse". I tried to step through the js execution and think the script halted at one one of underlying crypto functions.   

Mobile Safari has relatively slow JavaScript performance and a timeout occurs while trying to do the math to generate an address.
It does not work for me on my iPhone3G but it does work for Casascius on his iPhone4.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 11, 2011, 01:41:01 AM
 #118

v1.0
https://www.bitaddress.org/bitaddress.org-v1.0-SHA1-8fc60a3ca4eb24c85c31b264e95a9298e41032c2.html
- Added Wallet Details tab. View your private key in the various formats.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1344


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
October 11, 2011, 02:03:30 AM
 #119

v1.0
https://www.bitaddress.org/bitaddress.org-v1.0-SHA1-8fc60a3ca4eb24c85c31b264e95a9298e41032c2.html
- Added Wallet Details tab. View your private key in the various formats.

I don't think there exists such thing as a "standard format" in base58 that's < 51 characters.  The standard base58 format is the sipa wallet import format.  I also wouldn't offer it in base64 unless something else uses it prominently (e.g. OpenSSL, but OpenSSL uses hex).  These unused formats will just serve to confuse people.

Also, hexadecimal is misspelled on the actual website.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper wallets instead.
BkkCoins
Hero Member
*****
Offline Offline

Activity: 784


firstbits:1MinerQ


View Profile WWW
October 11, 2011, 02:35:19 AM
 #120

v1.0
https://www.bitaddress.org/bitaddress.org-v1.0-SHA1-8fc60a3ca4eb24c85c31b264e95a9298e41032c2.html
- Added Wallet Details tab. View your private key in the various formats.
Cool. Another way to convert. I don't have a "mini-key" to test but if you put that in will it also give you the other formats?

Pages: « 1 2 3 4 5 [6] 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!