Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

HD wallet error #1215

Closed
Dreamsorcerer opened this Issue Jan 21, 2016 · 2 comments

Comments

Projects
None yet
2 participants

Location: https://bitcoin.org/en/developer-guide#hierarchical-deterministic-key-creation

Whether creating child public keys or further-descended public keys, a predictable sequence of integer values would be no better than using a single public key for all transactions, as anyone who knew one child public key could find all of the other child public keys created from the same parent public key.

My understanding from reading the rest of this wiki and BIP 32 is that knowing a child public key will not allow you to find sibling keys. You would need the extended parent public key to achieve this.

In which case, using a single public key is much worse. As the wiki states earlier on, for increased security/privacy each key should be used only once. If a public child key allowed you to find other sibling keys, that would greatly decrease privacy and security in my mind, even with random integer values there are only ~2 billion possible keys, which doesn't sound infeasible to bruteforce.

Is this paragraph wrong, or am I misunderstanding something?

Contributor

harding commented Jan 22, 2016

That paragraph doesn't describe BIP32; it describes a reason for not using a simpler design that doesn't include the chain code.

@harding harding added the Dev Docs label Jan 22, 2016

Ah, I see now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment