Bitcoin Forum
May 14, 2024, 02:37:54 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: SHA256 password hashing?  (Read 591 times)
shogodz89 (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
May 09, 2014, 11:27:40 PM
 #1

Someone used this as a counter argument to Bitcoins security on encrypted wallets.

http://forums.udacity.com/questions/6016855/hashing-passwords-using-sha256-is-not-enough-today

How does this apply to bitcoin (besides using ASICs for hashing) and does his argument hold any merit? I'm ignorant as to how Bitcoin Core encrypts wallets to prevent unauthorized usage so can someone please enlighten me?
1715654274
Hero Member
*
Offline Offline

Posts: 1715654274

View Profile Personal Message (Offline)

Ignore
1715654274
Reply with quote  #2

1715654274
Report to moderator
You can see the statistics of your reports to moderators on the "Report to moderator" pages.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715654274
Hero Member
*
Offline Offline

Posts: 1715654274

View Profile Personal Message (Offline)

Ignore
1715654274
Reply with quote  #2

1715654274
Report to moderator
gmaxwell
Staff
Legendary
*
Offline Offline

Activity: 4172
Merit: 8420



View Profile WWW
May 10, 2014, 01:41:19 AM
 #2

Bitcoin core wallet encryption uses a salted KDF and 100ms (on your computer) worth of SHA512, with a hard minimum of 25,000 iterations (though on normal computers its well in excess of 100k iterations). There is only so much you can do for a really bad key, but Bitcoin core does the prudent thing and makes very fast searches infeasible.
grue
Legendary
*
Offline Offline

Activity: 2058
Merit: 1431



View Profile
May 10, 2014, 02:22:27 AM
 #3

the post in question talks about password hashing, as in comparing the entered password to a stored hash for authentication. bitcoin does not work this way. instead, it uses a key stretching function described in gmaxwell's post above to derive the AES decryption key.

It is pitch black. You are likely to be eaten by a grue.

Adblock for annoying signature ads | Enhanced Merit UI
shogodz89 (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
May 10, 2014, 01:21:12 PM
 #4

Thank you for the quick replies. I figured that the wallet encryption process wasn't as simple as hashing the password but I just didn't actually know how it actually worked.
Are there any links or documentation on wallet encryption I can look into?
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!