Cryptography Stack Exchange
Cryptography Stack Exchange

Questions tagged [bip32]

BIP32, or Hierarchical Deterministic Wallets. HD wallets are wallets that can be shared amongst different wallet implementation with or without the ability to spend coins.

HD wallets are wallets that can be shared partially or entirely with different systems, each with or without the possibility of spending coins.

https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki

8 questions
9
votes
1 answer

Ed25519 and hierarchical deterministic wallet

I'm building a solution based on the stellar codebase and using the Ed25519 curve for the signatures. One of the features I've been adding to the system is a support for hierarchical deterministic wallets according to BIP32. For that use case I've…
Stanislav Cherviakov
  • 91
  • 2
4
votes
1 answer

Can keys from Bitcoin's Hierarchical Deterministic Wallets be correlated (reducing privacy)?

I'm trying to understand if the feature "Hierarchical Deterministic Wallets" in Bitcoin allows for complete privacy of all derived keys, and if any of those keys can be associated with each other after they are generated. Knowing the answer to this…
makerofthings7
  • 2,631
  • 1
  • 22
  • 37
3
votes
1 answer

Does PBKDF2 HMAC 512 really only produce a maximum of ~128 bits of entropy? Regardless of input?

Andreas Antonopoulos effectively states: an input of 256bits of entropy into PBKDF2-HMAC-SHA512 will ONLY output a 64 byte hash containing ~128 bits of entropy. He states the algorithm essentially ignores the extra entropy going in, and it is…
George
  • 33
  • 4
2
votes
2 answers

Is there a relationship between the secp256k1 public key of the sum of two private keys, and the public keys of those original two private keys?

If I have two secp256k1 private keys and add them together, can I derive the public key for the sum, if I only know the public keys for the two original private keys? (I think this may be the core of understanding bip32.)
fadedbee
  • 968
  • 1
  • 11
  • 31
2
votes
1 answer

What is the maths behind Bitcoin's BIP32?

I've read about BIP32 key derivation functions. I'm trying to understand how, given a secp256k1 key pair, that "child" public keys may be generated from just the public key, and the corresponding child private keys can be generated from the private…
fadedbee
  • 968
  • 1
  • 11
  • 31
1
vote
2 answers

Standard tools for deterministic RSA key generation using seed?

I'd like to resuse the mnemonic I have from bip39 for crypto in other domains such as ssh and tls, etc. Are there standard tools (ie, openssl) to deterministically generate rsa key/pairs given a seed value? I know technically it is possible using…
Scott Klarenbach
  • 119
  • 2
0
votes
0 answers

is it safe to do public key to public key derivation with Ed25519?

Deriving a public key from a public key in Ed25519 is possible, some algorithms are available. My question is why there are so few implementations compared to secp256k1 for example. The extra checks necessary to implement it look at least more error…
nultrino
  • 101
0
votes
1 answer

What's wrong with BIP32 from NIST's perspective?

BIP32 is listed as Non-Approved Security Functions (see page 29 in 1). I could not find any problem with the primitives used in BIP32. HMAC-SHA512: This is a FIPS-approved algorithm (see page 25 in 1). secp256k1: This curve is allowed to be used…
user
  • 313
  • 2
  • 8