giszmo
Legendary
 Offline
Activity: 1862
Merit: 1105
WalletScrutiny.com
|
 |
April 24, 2014, 10:52:51 PM |
|
vanity is best outsourced, so when searching you are not just searching for your one address but for all requested ones at once
what do you mean?? If you want address hello and I want Hallo, somebody could search for both and give you and me the respective results. AAAHHHHH!!!!! Bitcoin address generation is best never outsourced! Why did 10 replies not mention this? It is utterly stupid to trust any service to generate save addresses for you as there is no way of knowing if he deleted his copy or not. Once he gets cancer or turns into an asshole, he digs out these addresses and spends your money. |
| ɃɃWalletScrutiny.com | Is your wallet secure?(Methodology)
WalletScrutiny checks if wallet builds are reproducible, a precondition for code audits to be of value. | ɃɃ |
|
|
|
|
|
|
|
|
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
|
|
blackhathasher (OP)
Member
Offline
Activity: 117
Merit: 10
My Precious!
|
|
April 24, 2014, 11:02:53 PM |
|
AAAHHHHH!!!!! Bitcoin address generation is best never outsourced! Why did 10 replies not mention this? It is utterly stupid to trust any service to generate save addresses for you as there is no way of knowing if he deleted his copy or not. Once he gets cancer or turns into an asshole, he digs out these addresses and spends your money.
yeah this much is pretty obvious... i was curious though if there was some time of secured service providing this... i still probably would never trust it, however i was curious. i will continue to hash away at my own vanity address on my own servers.. after having the basic logic explained (which i probably should have grokked from the start) i will just disperse vanitygen across a few dozen servers and see which one comes up the winner. |
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3374
Merit: 4606
|
|
April 24, 2014, 11:06:01 PM |
|
If you want address hello and I want Hallo, somebody could search for both and give you and me the respective results.
Exactly. There are services that provide this. It is utterly stupid to trust any service to generate save addresses for you as there is no way of knowing if he deleted his copy or not. Once he gets cancer or turns into an asshole, he digs out these addresses and spends your money.
AAAHHHHH!!!!! Bitcoin address generation is best never outsourced! Why did 10 replies not mention this?
Because it isn't necessarily true. When done properly, it is possible for someone to generate an address for you without knowing what the private key is. 1) You generate a random 256-bit integer less than the SECP256k1 generator. You keep this secret. (Effectively, an ECDSA private key.)
2) You compute the corresponding EC point on the SECP256k1 curve. You share this with whoever is finding the vanity address for you. (This is the ECDSA public key that corresponds to the private key you generated in step one.)
3) The person working out the vanity address for you tries various 256-bit integers also less than the SECP256k1 generator. They compute the corresponding EC point and add it to the EC point you sent them (from step two). They then hash this and see if it produces the desired vanity address. They repeat this over and over until they find a 256-bit integer that works. They give this integer to you. (And the world, it need not be kept secret.)
4) You add the 256-bit integer they found to the 256-bit integer you generated in step 1 and reduce it modulo the SECP256k1 generator.
5) You now have the private key, and they don't. (And you can prove that they cannot generate the private key from just the information you gave them unless ECDSA is fundamentally broken.)
In ECDSA, you convert a private key to a public key by multiplying by the generator. Division is impossible.
The vanity address generation scheme above works because: (A+B)*G = AG + BG
You generate A and AG, but give them only AG.
They try various different B's, calculating the AG+BG for each one to find the right one for the vanity address.
They give you B. You can now compute A+B (the secret key corresponding to the public key AG+BG) but nobody else can since they do not know A.
Computing A from AG would mean breaking ECDSA fundamentally. All you gave them is AG, an ECDSA public key. If they could figure out the private key to your new account (A+B), they could also figure out A. So if they could figure out the private key to your vanity account, they could also figure out the private key you created in step 1. But all you gave them was the corresponding public key. So any compromise of the vanity account would mean they could compromise a private key given only its corresponding public key.
For one such service, see here: https://bitcointalk.org/index.php?topic=84569.0 |
|
|
|
|
|
lnternet
|
|
April 24, 2014, 11:10:07 PM |
|
AAAHHHHH!!!!! Bitcoin address generation is best never outsourced!
Good thinking, but no, it's possible to do trustless. Crypto is wonderful technology  |
1ntemetqbXokPSSkuHH4iuAJRTQMP6uJ9
|
|
|
blackhathasher (OP)
Member
Offline
Activity: 117
Merit: 10
My Precious!
|
|
May 02, 2014, 10:36:01 PM |
|
AND...... I found it!
|
|
|
|
|
KaChingCoinDev
|
|
May 03, 2014, 12:43:20 AM |
|
AND...... I found it!
Cool! What address did you find? |
|
|
|
|
blackhathasher (OP)
Member
Offline
Activity: 117
Merit: 10
My Precious!
|
|
May 03, 2014, 02:57:24 AM
Last edit: May 03, 2014, 03:10:53 AM by blackhathasher |
|
 1BLackHAtGEKmcioF8pA88XPbEkBf8Hf12 It took about 25 days from start to finish... |
|
|
|
Injust
Legendary
Offline
Activity: 1008
Merit: 1000
|
|
May 03, 2014, 03:20:59 AM |
|
1BLackHAtGEKmcioF8pA88XPbEkBf8Hf12 It took about 25 days from start to finish... Damn that QR code tho. |
|
|
|
|
blackhathasher (OP)
Member
Offline
Activity: 117
Merit: 10
My Precious!
|
|
May 03, 2014, 03:48:43 AM |
|
well if you have any extra bitcoin you want to let me hold on to just send them to that address... k... thanks!
|
|
|
|
Elwar
Legendary
Offline
Activity: 3598
Merit: 2384
Viva Ut Vivas
|
|
May 03, 2014, 06:58:06 AM |
|
Did you mean for it to say Black Hat Geek?
|
First seastead company actually selling sea homes: Ocean Builders https://ocean.builders Of course we accept bitcoin. |
|
|
|
BunsenBurner
|
|
May 03, 2014, 07:01:48 AM |
|
Did you mean for it to say Black Hat Geek?
Or are you trying to find address with "blackhat" and find the "gek" part accidentally? |
|
|
|
blackhathasher (OP)
Member
Offline
Activity: 117
Merit: 10
My Precious!
|
|
May 03, 2014, 02:02:58 PM |
|
Or are you trying to find address with "blackhat" and find the "gek" part accidentally?
Yep... Talk about awesome! |
|
|
|
tocoolforschool
Newbie
Offline
Activity: 44
Merit: 0
|
|
May 03, 2014, 03:47:17 PM |
|
9 characters !? Good luck I thought I was hard core when I searched for 6 lol. |
|
|
|
|
blackhathasher (OP)
Member
Offline
Activity: 117
Merit: 10
My Precious!
|
|
May 03, 2014, 04:13:50 PM |
|
9 characters !? Good luck I thought I was hard core when I searched for 6 lol. Already found it. Took just 25 days. If I do it again I think I am going to distribute the job across many more servers in my data center to increase my luck and perhaps do it faster next time. |
|
|
|
|
Pony789
|
|
May 03, 2014, 06:01:07 PM |
|
9 characters !? Good luck I thought I was hard core when I searched for 6 lol. Already found it. Took just 25 days. If I do it again I think I am going to distribute the job across many more servers in my data center to increase my luck and perhaps do it faster next time. 9 characters vanity address found with just one server in just 25 days. That's is pretty lucky |
|
|
|
|
Brangdon
|
|
May 04, 2014, 01:23:59 PM |
|
If I do it again I think I am going to distribute the job across many more servers in my data center to increase my luck and perhaps do it faster next time.
Do you have a decent graphics card? If so, did you use the version of vanitygen that exploits it? Doing so can make a big difference. On my machine, generating 1Brangdon gets to 50% after 511 days with vanitygen, 310 days with vanitygen64, and 15 days with oclvanitygen. So 20 times faster with the graphics card. |
Bitcoin: 1BrangfWu2YGJ8W6xNM7u66K4YNj2mie3t Nxt: NXT-XZQ9-GRW7-7STD-ES4DB
|
|
|
boumalo
Legendary
Offline
Activity: 1890
Merit: 1018
|
|
May 04, 2014, 02:23:58 PM |
|
AAAHHHHH!!!!! Bitcoin address generation is best never outsourced! Why did 10 replies not mention this? It is utterly stupid to trust any service to generate save addresses for you as there is no way of knowing if he deleted his copy or not. Once he gets cancer or turns into an asshole, he digs out these addresses and spends your money.
yeah this much is pretty obvious... i was curious though if there was some time of secured service providing this... i still probably would never trust it, however i was curious. i will continue to hash away at my own vanity address on my own servers.. after having the basic logic explained (which i probably should have grokked from the start) i will just disperse vanitygen across a few dozen servers and see which one comes up the winner. Each time you trust a website or any third party you are taking a risk, there is enough risks just by not protecting the private key enough to trust a third party to add more risks |
|
|
|
blackhathasher (OP)
Member
Offline
Activity: 117
Merit: 10
My Precious!
|
|
May 04, 2014, 02:29:25 PM |
|
Do you have a decent graphics card? If so, did you use the version of vanitygen that exploits it? Doing so can make a big difference. On my machine, generating 1Brangdon gets to 50% after 511 days with vanitygen, 310 days with vanitygen64, and 15 days with oclvanitygen. So 20 times faster with the graphics card.
i used vanitygen64 i didnt know about oclvanitygen. i have a whole slew of GPU miners that it should work on. i will try it sometime as i retire my gpu's but they are still hashing strong from me so i hesitate to take one offline. |
|
|
|
Injust
Legendary
Offline
Activity: 1008
Merit: 1000
|
|
May 04, 2014, 02:44:41 PM |
|
Do you have a decent graphics card? If so, did you use the version of vanitygen that exploits it? Doing so can make a big difference. On my machine, generating 1Brangdon gets to 50% after 511 days with vanitygen, 310 days with vanitygen64, and 15 days with oclvanitygen. So 20 times faster with the graphics card.
i used vanitygen64 i didnt know about oclvanitygen. i have a whole slew of GPU miners that it should work on. i will try it sometime as i retire my gpu's but they are still hashing strong from me so i hesitate to take one offline. OMG you weren't using oclvanitygen? :O Considering that you were just using vanitygen64, 25 days is fast  |
|
|
|
|
|
