presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 22, 2014, 09:36:14 PM |
|
https://kryptowallet.org/ We love BTCBTCBTCBTCIt's time to get a secure Bitcoin wallet.We don't store your Bitcoins locally or on our servers. So there is no Hacking possible like in MtGox. Why should You use KryptoWallet ?We are Open Source We are a zero footprint wallet. We support online or cold storage. You can access your Bitcoin at every Computer with/without Internet access We will do everything we can to protect your Bitcoins.However you also need to take responsibility and follow these guidelines. Never give out your passphrase. Consider multiple passphrases Never lose your passphrases. For more infomation visit kryptowallet.org/ or newtimes.co Try also our encrypted Cloud Service newtimes.co/infinityCopyright (C) NewTimes/Devision KryptoWallet.
|
|
|
|
amspir
Member
Offline
Activity: 112
Merit: 10
|
|
March 22, 2014, 09:45:13 PM |
|
Just curious, how much complexity do you enforce when generating a passphrase?
It would seem that running an extensive dictionary password attack could yield some ill-gotten dividends if you have a high enough usage.
|
|
|
|
odolvlobo
Legendary
Offline
Activity: 4494
Merit: 3403
|
|
March 22, 2014, 09:49:57 PM |
|
If the private keys are generated from an encrypted passphrase, then I cannot access my bitcoins if your site goes down, right?
Where is the encryption of the passphrase done? Do I send the passphrase to your service or is your encryption key sent to me?
|
Join an anti-signature campaign: Click ignore on the members of signature campaigns. PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 22, 2014, 09:52:10 PM |
|
Just curious, how much complexity do you enforce when generating a passphrase?
It would seem that running an extensive dictionary password attack could yield some ill-gotten dividends if you have a high enough usage.
AES 256bit keys with AES 128bit
|
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 22, 2014, 09:53:13 PM |
|
If the private keys are generated from an encrypted passphrase, then I cannot access my bitcoins if your site goes down, right?
Where is the encryption of the passphrase done? Do I send the passphrase to your service or is your encryption key sent to me?
At your Browser Cache, there is your Wallet,BTC ... saved. If you delete your Cache you still have access to your Coins
|
|
|
|
cp1
|
|
March 22, 2014, 10:07:36 PM |
|
At your Browser Cache, there is your Wallet,BTC ... saved. If you delete your Cache you still have access to your Coins
But what algorithm do you use to generate the private keys from the passphrase?
|
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 22, 2014, 10:13:26 PM |
|
At your Browser Cache, there is your Wallet,BTC ... saved. If you delete your Cache you still have access to your Coins
But what algorithm do you use to generate the private keys from the passphrase? AES 256bit with OpenSSL, bitcoind in JavaScrypt
|
|
|
|
cp1
|
|
March 22, 2014, 10:18:51 PM |
|
How do you generate additional addresses?
|
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 22, 2014, 10:37:48 PM |
|
How do you generate additional addresses?
Your passphrase is turned into a 128bit key and it is into a 256bit key encrypted which is then stretched into 10 bitcoin addresses. There is no limit but for now 10 per passphrase should be adequate. (OpenSSL+AES+Bitcoind)
|
|
|
|
odolvlobo
Legendary
Offline
Activity: 4494
Merit: 3403
|
|
March 22, 2014, 10:41:06 PM |
|
If the private keys are generated from an encrypted passphrase, then I cannot access my bitcoins if your site goes down, right? Where is the encryption of the passphrase done? Do I send the passphrase to your service or is your encryption key sent to me?
At your Browser Cache, there is your Wallet,BTC ... saved. If you delete your Cache you still have access to your Coins Sorry, I didn't understand your answer. Let's assume the wallet isn't cached. If the wallet is not cached, then the passphrase must be encrypted to generate the private keys. Do I send my passphrase to you to be encrypted or do you send the encryption key to me? If the wallet is not cached, then I can only access my bitcoins if your service is available because I need you to encrypt the passphrase, right?
|
Join an anti-signature campaign: Click ignore on the members of signature campaigns. PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 22, 2014, 11:04:22 PM |
|
If the private keys are generated from an encrypted passphrase, then I cannot access my bitcoins if your site goes down, right? Where is the encryption of the passphrase done? Do I send the passphrase to your service or is your encryption key sent to me?
At your Browser Cache, there is your Wallet,BTC ... saved. If you delete your Cache you still have access to your Coins Sorry, I didn't understand your answer. Let's assume the wallet isn't cached. If the wallet is not cached, then the passphrase must be encrypted to generate the private keys. Do I send my passphrase to you to be encrypted or do you send the encryption key to me? If the wallet is not cached, then I can only access my bitcoins if your service is available because I need you to encrypt the passphrase, right? Nothing of that. If you access our Server your PC download the SourceCode and encrypt/decrypt there the Wallet. But if you delete the Browser Cache your PC download the Code again and open the Wallet again. The Website is only the GUI/Userinterface for the Wallet. Your passphrase is like a door key. All Software runs local at your PC
|
|
|
|
ryanmnercer
|
|
March 22, 2014, 11:28:54 PM |
|
At your Browser Cache, there is your Wallet,BTC ... saved. If you delete your Cache you still have access to your Coins
But what algorithm do you use to generate the private keys from the passphrase? AES 256bit with OpenSSL, bitcoind in JavaScrypt Hold on. You want me, to trust you ( a stranger) with my bitcoin in YOUR wallet... on a site that uses javascript... that claims to encrypt my wallet with a key YOU generate via javascript. PASS
|
|
|
|
odolvlobo
Legendary
Offline
Activity: 4494
Merit: 3403
|
|
March 22, 2014, 11:46:06 PM |
|
Nothing of that. If you access our Server your PC download the SourceCode and encrypt/decrypt there the Wallet. But if you delete the Browser Cache your PC download the Code again and open the Wallet again. The Website is only the GUI/Userinterface for the Wallet. Your passphrase is like a door key. All Software runs local at your PC
Thanks. I understand. Next question ... As I understand it, the passphrase is encrypted as a first step to generate the private keys. Where does the key used to encrypt the passphrase come from?
|
Join an anti-signature campaign: Click ignore on the members of signature campaigns. PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 23, 2014, 12:01:19 AM |
|
At your Browser Cache, there is your Wallet,BTC ... saved. If you delete your Cache you still have access to your Coins
But what algorithm do you use to generate the private keys from the passphrase? AES 256bit with OpenSSL, bitcoind in JavaScrypt Hold on. You want me, to trust you ( a stranger) with my bitcoin in YOUR wallet... on a site that uses javascript... that claims to encrypt my wallet with a key YOU generate via javascript. PASSHold on. Your Bitcoins are not at my Wallet there are in you PC. I generate nothing
|
|
|
|
ryanmnercer
|
|
March 23, 2014, 12:03:23 AM |
|
Hold on. Your Bitcoins are not at my Wallet there are in you PC. I generate nothing
You are using javascript. There is no reason on the planet for anyone to use javascript. Period. It's a steaming pile of shit with a bazillion known vulnerabilities and more found daily.
|
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 23, 2014, 12:14:28 AM |
|
Nothing of that. If you access our Server your PC download the SourceCode and encrypt/decrypt there the Wallet. But if you delete the Browser Cache your PC download the Code again and open the Wallet again. The Website is only the GUI/Userinterface for the Wallet. Your passphrase is like a door key. All Software runs local at your PC
Thanks. I understand. Next question ... As I understand it, the passphrase is encrypted as a first step to generate the private keys. Where does the key used to encrypt the passphrase come from? Now i don't und er stand you question. But i try to answer. Generate: 1. Your Browser download the Scrypt 2. You generate a passphrase (OpenSSL+AES) 3. Bitcoind generate a encypted Wallet (AES) and generate 10 addresses (JavaScrypt/Bitcoind/Bitcoinj) 4.It encrypt all together (OpenSSL+AES) Login: 1. You access KryptoWallet (online) 2.You enter the passphrase (offline) 3. It decrypt the passphase (offline) (OpenSSL with AES) 4.It decrypt the Wallet (OpenSSL with AES) (offline) 5. access to Wallet (offline) This is a short Version of how KryptoWallet works
|
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 23, 2014, 12:17:10 AM |
|
Hold on. Your Bitcoins are not at my Wallet there are in you PC. I generate nothing
You are using javascript. There is no reason on the planet for anyone to use javascript. Period. It's a steaming pile of shit with a bazillion known vulnerabilities and more found daily. No. JavaScript is secure. And not all is JavaScrypt the most is HTML,PHP. Java+JavaScrypt only for Bitcoind ( https://code.google.com/p/bitcoinj/)
|
|
|
|
cp1
|
|
March 23, 2014, 12:18:44 AM |
|
So where is the wallet stored? It can't be in your cache because if you delete your cache you'd delete your wallet
|
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 23, 2014, 12:23:05 AM |
|
So where is the wallet stored? It can't be in your cache because if you delete your cache you'd delete your wallet
In the Browser Cache. And no if you delete the Browser Cache you still can access your Bitcoin. You passphrase is your access(the key). With the passphrase you can generate again the Wallet with the same addresses and privat keys. Your passphrase is you Wallet only encypted
|
|
|
|
presidentcoin (OP)
Full Member
Offline
Activity: 224
Merit: 100
Any store can buy, sell, and accept Crypto
|
|
March 23, 2014, 12:24:49 AM |
|
If you have more question ask here or at support@newtimes.co
|
|
|
|
|