Pages:
Author

Topic: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key - page 23. (Read 153371 times)

hero member
Activity: 924
Merit: 502
I absolutely love what you've done with this project!

One minor request though: Could you change the bulk paper wallet generation so that the public key and private key are in different columns. The reason is that I want to give (bulk) encrypted wallets to people to look after for me, but I don't want them to know the public addresses (and thus how many coins I have).

If they were arranged in neat columns I could simply print them out and cut off the public key column. The artwork version is perfect like this, but I want the wallets-per-page density of the non-art version.

What do you think?


sr. member
Activity: 437
Merit: 415
1ninja
Great replies guys! Thanks so much for taking the time.

I have been playing around for around 30 minutes now and can't get it going on my mac (fully). I am just not proficient on it like Linux.
Anyone know the mac commands for what pointbiz wrote?

Thanks again, much appreciated,
IAS

I uploaded a .sig for you for v2.5.1 and v2.6.0
https://www.bitaddress.org/bitaddress.org-v2.5.1-SHA1-b7bda19c2327cc44a81b68a44926a9f8057ed681.html.sig
https://www.bitaddress.org/bitaddress.org-v2.6.0-SHA1-4f1fea4620287f863473193b8d93a8f3877ba972.html.sig
sr. member
Activity: 437
Merit: 415
1ninja
v2.6.0

https://www.bitaddress.org/bitaddress.org-v2.6.0-SHA1-4f1fea4620287f863473193b8d93a8f3877ba972.html
 - Usability improvements to Single Wallet, Paper Wallet and Brain Wallet.
legendary
Activity: 1442
Merit: 1000
Antifragile
Great replies guys! Thanks so much for taking the time.

I have been playing around for around 30 minutes now and can't get it going on my mac (fully). I am just not proficient on it like Linux.
Anyone know the mac commands for what pointbiz wrote?

Thanks again, much appreciated,
IAS
hero member
Activity: 994
Merit: 507
Verifying the release:
1) get public key of author
2) import public key of author
3) get HTML from bitaddress.org
4) sha1 checksum of HTML
5) verify signed message from author
6) confirm sha1 in step 4 & 5 matches

Code:
wget http://www.bitaddress.org/ninja_bitaddress.org.txt
gpg --import ninja_bitaddress.org.txt
wget http://www.bitaddress.org/bitaddress.org-v2.5.1-SHA1-b7bda19c2327cc44a81b68a44926a9f8057ed681.html
sha1sum bitaddress.org-v2.5.1-SHA1-b7bda19c2327cc44a81b68a44926a9f8057ed681.html
wget -qO- http://www.bitaddress.org/pgpsignedmsg.txt | gpg -d

You should put that on your OP!! Also make note that if the page is saved as "whole webpage" as appossed to "just html" the checksum will not match.
sr. member
Activity: 437
Merit: 415
1ninja
https://www.bitaddress.org

I have provided a signed version of the SHA1 hash of the file:
http://www.bitaddress.org/ninja_bitaddress.org.txt - PGP Public Key
http://www.bitaddress.org/pgpsignedmsg.txt - Signed Message
Key fingerprint = 527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A


For those of us Noobs, and for the purposes of education and security, how can we check the the Signed Message? I have GPG on my computer and only know how to check a .sig file as Canton showed on his site.

I was able to verify the Key Fingerprint (File Checksum) here http://onlinemd5.com/ by selecting Sha1 and checking a File Checksum on the File (right?) And I got  - B7BDA19C2327CC44A81B68A44926A9F8057ED681.

Any other suggestions, links, etc are appreciated.

Much Thanks,
Its about sharing

Verifying the release:
1) get public key of author
2) import public key of author
3) get HTML from bitaddress.org
4) sha1 checksum of HTML
5) verify signed message from author
6) confirm sha1 in step 4 & 5 matches

Code:
wget http://www.bitaddress.org/ninja_bitaddress.org.txt
gpg --import ninja_bitaddress.org.txt
wget http://www.bitaddress.org/bitaddress.org-v2.5.1-SHA1-b7bda19c2327cc44a81b68a44926a9f8057ed681.html
sha1sum bitaddress.org-v2.5.1-SHA1-b7bda19c2327cc44a81b68a44926a9f8057ed681.html
wget -qO- http://www.bitaddress.org/pgpsignedmsg.txt | gpg -d
legendary
Activity: 3038
Merit: 1032
RIP Mommy
Dirty way to check it is command prompt
curl http://www.bitaddress.org/pgpsignedmsg.txt | gpg -d

gpg will say when the signature was made and with what RSA key ID. I got
"gpg: Signature made Thu Oct 24 20:57:16 2013 PDT using RSA key ID 63974F5A" (last 8 characters of the key fingerprint above).

"public key not found" because I didn't import the key.
legendary
Activity: 1358
Merit: 1001
https://gliph.me/hUF
https://www.bitaddress.org

I have provided a signed version of the SHA1 hash of the file:
http://www.bitaddress.org/ninja_bitaddress.org.txt - PGP Public Key
http://www.bitaddress.org/pgpsignedmsg.txt - Signed Message
Key fingerprint = 527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A


For those of us Noobs, and for the purposes of education and security, how can we check the the Signed Message? I have GPG on my computer and only know how to check a .sig file as Canton showed on his site.

[...]

Easiest for me (using KGpg): Import the public key, copy the whole message text to the clipboard, select "Sign/Verify Clipboard":
Code:
Good signature from:
ninja
Key ID: 527B5C82B1F6B2DB72A0ECBF87497B9163974F5A
The signature was created at Friday, October 25, 2013 05:57:16 AM
The signature is valid, but the key is untrusted
legendary
Activity: 1442
Merit: 1000
Antifragile
https://www.bitaddress.org

I have provided a signed version of the SHA1 hash of the file:
http://www.bitaddress.org/ninja_bitaddress.org.txt - PGP Public Key
http://www.bitaddress.org/pgpsignedmsg.txt - Signed Message
Key fingerprint = 527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A


For those of us Noobs, and for the purposes of education and security, how can we check the the Signed Message? I have GPG on my computer and only know how to check a .sig file as Canton showed on his site.

I was able to verify the Key Fingerprint (File Checksum) here http://onlinemd5.com/ by selecting Sha1 and checking a File Checksum on the File (right?) And I got  - B7BDA19C2327CC44A81B68A44926A9F8057ED681.

Any other suggestions, links, etc are appreciated.

Much Thanks,
Its about sharing
sr. member
Activity: 261
Merit: 285
This is the first I've heard. Thank you for mentioning it. I will add it soon. And thanks for the donation! Also, great site. Your paper wallet design looks great.

You're welcome and thanks for the nice words.

Regarding window.crypto.getRandomValues support: A top priority in my generator is that I'm going to add a note so that users are informed on the first screen whether or not their browser supports this function -- and if they don't, they'll be recommended to switch to a more modern browser if not.)  Ever since that insufficiency was found in the Android OS random number generator, I've been concerned about making sure the JS RNG is as strong as possible.

Question: in cases where window.crypto.getRandomValues is supported, can we safely turn off collecting mouse movement entropy? To me this seems like it would be a great motivator to get users to switch to a more modern browser --  non-getRandomValues browsers would require them to wiggle their mouse for a while (maybe even longer if we increase the entropy) while the getRandomValues browsers give instant satisfaction.

hero member
Activity: 994
Merit: 507
I'm using Chrome and an example key 6PfMEYvZfwTv7SccHBx6B7mfFBEoV AdAdyUUYpufneihL9a62d35xA4Sbw and no password box appears. When I click details it just says it's not a valid key and if it should be a sha256 hash instead...

It works fine in Firefox v24.0

I entered encrypted private key "6PfMEYvZfwTv7SccHBx6B7mfFBEoVAdAdyUUYpufneihL9a62d35xA4Sbw" and when i pressed "View Details" the "Enter BIP38 Passphrase" field appeared.

Not sure if anything changed but it worked for me today. Weird.
donator
Activity: 674
Merit: 523
I'm using Chrome and an example key 6PfMEYvZfwTv7SccHBx6B7mfFBEoV AdAdyUUYpufneihL9a62d35xA4Sbw and no password box appears. When I click details it just says it's not a valid key and if it should be a sha256 hash instead...

It works fine in Firefox v24.0

I entered encrypted private key "6PfMEYvZfwTv7SccHBx6B7mfFBEoVAdAdyUUYpufneihL9a62d35xA4Sbw" and when i pressed "View Details" the "Enter BIP38 Passphrase" field appeared.
hero member
Activity: 994
Merit: 507
I tried putting the encrypted key in the wallet details tab but it didn't work. Am I missing something?

When you enter your encrypted key and click View Details it should display an input box for the passphrase.

Does the passphrase box appear?

This is the regex I use:
/^6P[123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{56}$/


Can you generate an encrypted key that does not work that you are willing to share with a passphrase to help diagnose?


I'm using Chrome and an example key 6PfMEYvZfwTv7SccHBx6B7mfFBEoV AdAdyUUYpufneihL9a62d35xA4Sbw and no password box appears. When I click details it just says it's not a valid key and if it should be a sha256 hash instead...
sr. member
Activity: 437
Merit: 415
1ninja
I tried putting the encrypted key in the wallet details tab but it didn't work. Am I missing something?

When you enter your encrypted key and click View Details it should display an input box for the passphrase.

Does the passphrase box appear?

This is the regex I use:
/^6P[123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{56}$/


Can you generate an encrypted key that does not work that you are willing to share with a passphrase to help diagnose?

hero member
Activity: 994
Merit: 507
I tried putting the encrypted key in the wallet details tab but it didn't work. Am I missing something?
sr. member
Activity: 437
Merit: 415
1ninja
Pointbiz, I forgot whether or not I've mentioned to you that Gavin sent me a patch for my own fork of bitaddress to take advantage of crypto.getRandomValues (if supported by the browser) to generate better random numbers.

I've had this in place at https://bitcoinpaperwallet.com for a couple months now, and I meant to issue a github pull request but I just haven't gotten around to it. See the link below to see where Gavin suggested adding it. I don't think you've added this support, but since crypto.getRandomValues is fairly well supported at this point, I think it's worth adding to bitaddress.org. MOAR random please! Smiley

https://github.com/cantonbecker/bitcoinpaperwallet/commit/b4c2cf68e79f9f469cd180238d9377086058aaa9

PS: As always, thanks for your continued work on this excellent engine. Happily donated another .25BTC just now
https://blockchain.info/tx/4fddde7eea3a9af15c6a120fe93b6da9fe6a1da287c1c448c47615407a7f87f9

May I remind everyone on this thread that Pointbiz's project is essential to ongoing easy and safe security of offline bitcoin? His donation address is 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN

- Canton

This is the first I've heard. Thank you for mentioning it. I will add it soon.
And thanks for the donation! Also, great site. Your paper wallet design looks great.
newbie
Activity: 7
Merit: 0
donator
Activity: 674
Merit: 523
BIP38 integration is just, well, wow. Thanks so much!
sr. member
Activity: 261
Merit: 285
Pointbiz, I forgot whether or not I've mentioned to you that Gavin sent me a patch for my own fork of bitaddress to take advantage of crypto.getRandomValues (if supported by the browser) to generate better random numbers.

I've had this in place at https://bitcoinpaperwallet.com for a couple months now, and I meant to issue a github pull request but I just haven't gotten around to it. See the link below to see where Gavin suggested adding it. I don't think you've added this support, but since crypto.getRandomValues is fairly well supported at this point, I think it's worth adding to bitaddress.org. MOAR random please! Smiley

https://github.com/cantonbecker/bitcoinpaperwallet/commit/b4c2cf68e79f9f469cd180238d9377086058aaa9

PS: As always, thanks for your continued work on this excellent engine. Happily donated another .25BTC just now
https://blockchain.info/tx/4fddde7eea3a9af15c6a120fe93b6da9fe6a1da287c1c448c47615407a7f87f9

May I remind everyone on this thread that Pointbiz's project is essential to ongoing easy and safe security of offline bitcoin? His donation address is 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN

- Canton
sr. member
Activity: 369
Merit: 250
Awesome, thanks pointbiz.

Quick question, how do you decrypt a BIP38 encrypted key?  The "Wallet details" tab doesn't recognize it.

Edit: Sorry, yes the Wallet details tab does support it, user error Smiley
Pages:
Jump to: