Bitcoin Forum
May 10, 2024, 02:10:02 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: How can I sign and send transaction without importing private key ?  (Read 224 times)
Uniex (OP)
Jr. Member
*
Offline Offline

Activity: 115
Merit: 2


View Profile
August 23, 2018, 09:10:41 AM
 #1

I want to create online wallet without storing user private keys.

For example - I have full Bitcoin node, user sends to server his private key(via https) just to sign transaction or view his balance.
Is there any way to do it ? any ideas ?
1715350202
Hero Member
*
Offline Offline

Posts: 1715350202

View Profile Personal Message (Offline)

Ignore
1715350202
Reply with quote  #2

1715350202
Report to moderator
Each block is stacked on top of the previous one. Adding another block to the top makes all lower blocks more difficult to remove: there is more "weight" above each block. A transaction in a block 6 blocks deep (6 confirmations) will be very difficult to remove.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715350202
Hero Member
*
Offline Offline

Posts: 1715350202

View Profile Personal Message (Offline)

Ignore
1715350202
Reply with quote  #2

1715350202
Report to moderator
mdayonliner
Copper Member
Sr. Member
****
Offline Offline

Activity: 630
Merit: 420


We are Bitcoin!


View Profile
August 23, 2018, 09:13:50 AM
 #2

I want to create online wallet without storing user private keys.

For example - I have full Bitcoin node, user sends to server his private key(via https) just to sign transaction or view his balance.
Is there any way to do it ? any ideas ?

There is a point I want to add, however. It is possible to send coins without importing the private key into a computer which is connected to the Internet. In fact, this is how a properly run exchange or online wallet service ought to maintain its cold storage. Normally, funds are just sent to the public address of the cold storage. When it comes time to send coins out of cold storage, the private key is imported into an offline computer, the transaction is generated and signed, and the signed transaction is then broadcast using a different computer (which is connected to the network). This increases security as it prevents malicious attackers from gaining access to the private key because they simply have no way of connecting to the offline computer on which it is stored.

Hope this reference helps...

Be happy be at peace. Looking forward to BTC at $1M
bob123
Legendary
*
Offline Offline

Activity: 1624
Merit: 2481



View Profile WWW
August 23, 2018, 09:21:37 AM
 #3

I want to create online wallet without storing user private keys.

This definitely is doable. You might simply want to do this with JS or PHP.
Then just host it and open source the code.



For example - I have full Bitcoin node, user sends to server his private key(via https) just to sign transaction or view his balance.

The signing and address generation should be done on the client side.
Your server should only be providing the required information (balances of given addresses, service to push the transaction, ...).



Is there any way to do it ? any ideas ?

Besides all sensitive information always being processed client-sided, you'd need to create your backend which interacts with the core node to retrieve the information.

Blockchain.com (previously blockchain.info) basically does that with the exception that they are storing encrypted copies of the private keys.
The better approach regarding security would be to not store these information on the server (e.g. like MEW with a wallet file / seed).

NeuroticFish
Legendary
*
Offline Offline

Activity: 3668
Merit: 6382


Looking for campaign manager? Contact icopress!


View Profile
August 23, 2018, 11:14:43 AM
 #4

user sends to server his private key(via https) just to sign transaction or view his balance.

Just a small correction, you need the private key only to sign the transaction.
For viewing balance and all other things, including the build of the transaction, the address should be enough. I think that with this approach your project could be even safer.

.
.HUGE.
▄██████████▄▄
▄█████████████████▄
▄█████████████████████▄
▄███████████████████████▄
▄█████████████████████████▄
███████▌██▌▐██▐██▐████▄███
████▐██▐████▌██▌██▌██▌██
█████▀███▀███▀▐██▐██▐█████

▀█████████████████████████▀

▀███████████████████████▀

▀█████████████████████▀

▀█████████████████▀

▀██████████▀▀
█▀▀▀▀











█▄▄▄▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.
CASINSPORTSBOOK
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀▀█











▄▄▄▄█
Thirdspace
Hero Member
*****
Offline Offline

Activity: 1232
Merit: 738


Mixing reinvented for your privacy | chipmixer.com


View Profile
August 23, 2018, 12:46:36 PM
 #5

I want to create online wallet without storing user private keys.
you can create something similar to MyEtherWallet.com (MEW) but for bitcoin
so the user is responsible for his own private keys (or mnemonic seed)

For example - I have full Bitcoin node, user sends to server his private key(via https) just to sign transaction or view his balance.
Is there any way to do it ? any ideas ?
your server runs a full node with web and js interface for user's wallet
user SHOULD NEVER send private key to your server
your code should be able to create and sign raw transaction on client's side
then your server accepts only the signed rawtx and passes it to your node
and finally your node broadcasts the transaction to bitcoin network

odolvlobo
Legendary
*
Offline Offline

Activity: 4312
Merit: 3214



View Profile
August 23, 2018, 05:41:25 PM
 #6

Private keys must never be transmitted. The transaction should be signed offline. A hardware wallet is an excellent solution.

Join an anti-signature campaign: Click ignore on the members of signature campaigns.
PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
HCP
Legendary
*
Offline Offline

Activity: 2086
Merit: 4316

<insert witty quote here>


View Profile
August 23, 2018, 09:42:10 PM
 #7

... user sends to server his private key(via https) just to sign transaction...
Seriously? Huh Shocked You want users to transmit their private keys to a remote server??!? Huh Shocked Shocked

you should NEVER be transmitting private keys (regardless of whether or not HTTPS is used). This entire idea is Broken™


any ideas ?
Yes, go away and rethink your design.  Roll Eyes

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
Jaycee99
Sr. Member
****
Offline Offline

Activity: 1036
Merit: 273


View Profile
August 23, 2018, 11:04:24 PM
 #8

I want to create online wallet without storing user private keys.

For example - I have full Bitcoin node, user sends to server his private key(via https) just to sign transaction or view his balance.
Is there any way to do it ? any ideas ?

Online wallet? Without using any privet key?  Not new here but I can see an option wheere you need to use a onlile wallet which means you need to.

As of I know that privet key is a password? So guessing it is a bad idea to send it using https?(first time to heard of it *peace*)so in my side it is a bad idea. Is my translation working for this discussion? Is it correct? Please to clarify my correction. I just want to help here:)

Now, as I can see that the best any kind of option is online like binance wallet still base on what  I understand and basing from my small knowledge about bitcoin node it has many risk but still it is up to one person to make it work without any kind of hesitation.

andreibi
Legendary
*
Offline Offline

Activity: 1647
Merit: 1012

Practising Hebrew before visiting Israel


View Profile WWW
August 24, 2018, 02:26:46 AM
 #9

I want to create online wallet without storing user private keys.

For example - I have full Bitcoin node, user sends to server his private key(via https) just to sign transaction or view his balance.
Is there any way to do it ? any ideas ?

You can't create an online wallet in the purest sense of the word without storing the encrypted private keys. The only thing you can do is make the signed broadcast transaction service much simpler.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!