Skip to main content

Questions tagged [bip32]

BIP32, or Hierarchical Deterministic Wallets. HD wallets are wallets that can be shared amongst different wallet implementation with or without the ability to spend coins.

Filter by
Sorted by
Tagged with
0 votes
1 answer
69 views

What's wrong with BIP32 from NIST's perspective?

BIP32 is listed as Non-Approved Security Functions (see page 29 in 1). I could not find any problem with the primitives used in BIP32. HMAC-SHA512: This is a FIPS-approved algorithm (see page 25 in 1)....
user's user avatar
  • 183
0 votes
0 answers
57 views

Key recovery attack on BIP32-Ed25519

BIP32 describes a method for deriving secp256k1 key-pairs. BIP32-Ed25519 is a similar method for Ed25519. For both, the derivations proceed from a root key-pair by adding a random-like integer to the ...
Permutahedron's user avatar
3 votes
1 answer
238 views

Does PBKDF2 HMAC 512 really only produce a maximum of ~128 bits of entropy? Regardless of input?

Andreas Antonopoulos effectively states: an input of 256bits of entropy into PBKDF2-HMAC-SHA512 will ONLY output a 64 byte hash containing ~128 bits of entropy. He states the algorithm essentially ...
George's user avatar
  • 33
1 vote
2 answers
2k views

Standard tools for deterministic RSA key generation using seed?

I'd like to resuse the mnemonic I have from bip39 for crypto in other domains such as ssh and tls, etc. Are there standard tools (ie, openssl) to deterministically generate rsa key/pairs given a seed ...
Scott Klarenbach's user avatar
2 votes
2 answers
2k views

Is there a relationship between the secp256k1 public key of the sum of two private keys, and the public keys of those original two private keys?

If I have two secp256k1 private keys and add them together, can I derive the public key for the sum, if I only know the public keys for the two original private keys? (I think this may be the core of ...
fadedbee's user avatar
  • 938
0 votes
0 answers
211 views

is it safe to do public key to public key derivation with Ed25519?

Deriving a public key from a public key in Ed25519 is possible, some algorithms are available. My question is why there are so few implementations compared to secp256k1 for example. The extra checks ...
nultrino's user avatar
  • 101
2 votes
1 answer
239 views

What is the maths behind Bitcoin's BIP32?

I've read about BIP32 key derivation functions. I'm trying to understand how, given a secp256k1 key pair, that "child" public keys may be generated from just the public key, and the ...
fadedbee's user avatar
  • 938
9 votes
1 answer
1k views

Ed25519 and hierarchical deterministic wallet

I'm building a solution based on the stellar codebase and using the Ed25519 curve for the signatures. One of the features I've been adding to the system is a support for hierarchical deterministic ...
Stanislav Cherviakov's user avatar
4 votes
1 answer
577 views

Can keys from Bitcoin's Hierarchical Deterministic Wallets be correlated (reducing privacy)?

I'm trying to understand if the feature "Hierarchical Deterministic Wallets" in Bitcoin allows for complete privacy of all derived keys, and if any of those keys can be associated with each other ...
makerofthings7's user avatar