3
$\begingroup$

If I correctly understand the concept of a "brain wallet" in BitCoin, you start with a passphrase, generate the hash of the passphrase, then somehow derive a public / private key from that to use as your BitCoin identifier.

This conflicts with what I understand about key pairs... namely that they are special... not every number is qualified to be part of a key pair because there are requirements related to prime factorization. So how can the "brain wallet" algorithm work, since the hash could be any number?

$\endgroup$
2
  • 4
    $\begingroup$ You could simply seed the PRG used by your key generation algorithm using the hash you computed. That way the key-generation algorithm will always generate the same keypair. $\endgroup$
    – Maeher
    Apr 26, 2013 at 13:35
  • 4
    $\begingroup$ Factorization only applies to RSA, not to ECC. For ECDSA a private key is just a number in a certain range. Numbers outside of that range can be mapped into the range with the modulo operator. $\endgroup$ Apr 26, 2013 at 13:42

1 Answer 1

4
$\begingroup$

Bitcoin doesn't use RSA, it uses ECDSA. Every 256-bit value is a valid private key. (Though a very small fraction of them have to be folded.)

But even if the numbers had to be special, it still wouldn't matter. You could use every 256-bit value as a seed to a pseudo-random number generator which you could use to deterministically generate numbers that had whatever properties you need.

You can also trivially create schemes to generate numbers that do have needed properties from passphrases. For example, Ripple uses a scheme like the following:

  1. Set a counter to zero.

  2. Hash the passphrase together with the counter.

  3. Does the hash have the needed properties? If so, stop. We're done.

  4. Increment the counter.

  5. Go to step 2.

$\endgroup$
2
  • 1
    $\begingroup$ That is a kind of PRNG, though :-) $\endgroup$ Apr 27, 2013 at 13:08
  • $\begingroup$ Yes, it basically is. $\endgroup$ Apr 27, 2013 at 16:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.