Pages:
Author

Topic: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key - page 26. (Read 153371 times)

newbie
Activity: 54
Merit: 0
Hi All,


I used the bitaddress.org source code to make a Dr. Evil paper wallet generator that is located here:

http://evilwallet.wordpress.com/


You can see the difference between my code and the bitaddress.org source code from their github repo by using a online utility such as: http://www.comparemyfiles.com/ to compare the two files and see for yourself quite quickly.

My source code: https://github.com/obesityspray/Dr.-Evil-Paper-Wallet

Bitaddress.org github repo: https://github.com/pointbiz/bitaddress.org


Newbie Thread discussing this generator: https://bitcointalksearch.org/topic/dr-evil-paper-wallet-generator-186007

I hope you enjoy! Smiley
sr. member
Activity: 437
Merit: 415
1ninja
Hi, is it possible to generate a paper wallet safely with 2 compromised computers using the vanity key generator?
I've been wondering this for a long time.

Yes, I've done it. See my post here:
https://bitcointalksearch.org/topic/m.1421075

Here is another break down of the steps:
https://en.bitcoin.it/wiki/Two-factor_paper_wallet

I want to make this process more user friendly to do in bulk. To manually make 10 wallets using the steps I described is tedious but very secure!

A similar process may be possible using BIP38 encrypted wallets in the future. I'm still adding BIP38 support to the codebase.

b!z
legendary
Activity: 1582
Merit: 1010
Hi, is it possible to generate a paper wallet safely with 2 compromised computers using the vanity key generator?
I've been wondering this for a long time.
legendary
Activity: 1552
Merit: 1047
Hi

I have a question or three.

1. If i generate an address offline by going to the page, disconnecting wifi and generating a new address is this address now good to go?
I recommend using tails. Burn to CD or put on USB stick, restart your computer and boot it to tails (while offline), once finished it will remove all traces.
legendary
Activity: 2506
Merit: 1010
1. If i generate an address offline by going to the page, disconnecting wifi and generating a new address is this address now good to go?

Depending on whether or not your system is compromised.   Let's say you have malware that does a screen shot a couple times each second and uploads next time you reconnect the images of QR codes it snagged?

[Update: The solution is to use a LiveOS, i.e., boot to an operating system you know was not tampered with.   Then while offline load the static .html page that was originally obtained from bitaddress.org and verified using the sha1sum to be the same release as from github or from the site.]

2. How do i check the balance on the address?

Blockchain.info will show transactions where that address was used.

3. How do i move the balance from there to another address?

You need to import the private key somewhere.  

Bitcoin-Qt from the debug console has a way to import private key.
 - http://en.bitcoin.it/wiki/How_to_import_private_keys

Blockchain.info/wallet provides an import private key method.

Using a mobile, EasyWallet.org has "one touch" scanning to do this.

Also Mt. Gox has the ability to redeem a private key in which they sweep the funds into your Mt. Gox exchange account.
hero member
Activity: 756
Merit: 1000
Hi

I have a question or three.

1. If i generate an address offline by going to the page, disconnecting wifi and generating a new address is this address now good to go?

2. How do i check the balance on the address?

3. How do i move the balance from there to another address?

Thanks
legendary
Activity: 2506
Merit: 1010
v2.4

I'm a little late on verifying 2.4, but here it is:

I can verify that the BitAddress.org website has been updated and returns the same HTML from the commit with the description v2.4 (1d5951f6a04dd5a287ac925da4e626870ee58d60) in github:
 - https://github.com/pointbiz/bitaddress.org


To confirm this I first check the sha1sum hash of the html returned by a request to http://bitaddress.org:

$ wget --quiet -O - http://bitaddress.org|sha1sum
1d5951f6a04dd5a287ac925da4e626870ee58d60  -

$ GET -eSd bitaddress.org|grep -i "200 OK"
GET https://www.bitaddress.org/bitaddress.org-v2.4-SHA1-1d5951f6a04dd5a287ac925da4e626870ee58d60.html --> 200 OK


Then from my bitaddress.org repo:

$ git checkout master
$ git pull
$ git log --pretty=oneline|grep "v2.4"
eeed4db91edd9eda5eb4277a61aa16ad80bdcdcb v2.4 French translations

$ git checkout eeed4db91edd9eda5eb4277a61aa16ad80bdcdcb
$ git rev-list --max-count=1 HEAD
eeed4db91edd9eda5eb4277a61aa16ad80bdcdcb

$ sha1sum bitaddress.org.html
1d5951f6a04dd5a287ac925da4e626870ee58d60  bitaddress.org.html
legendary
Activity: 1708
Merit: 1020
May I suggest the following improvements:

1. Compressed keys for all output of paper wallet and bulk wallet, as an option. (Might as well include all other wallets, single wallets, brain wallets, vanity, etc.)
2. Choose a level of error correction for the QR codes. I prefer High or 30%. What is the level right now for version 2.4 ?
1. Yeah, that would be nice. Not sure how well compressed private keys are supported yet, though.

edit: please note that this will not make the private key or the address any shorter. It will only make the public key shorter and thus save space on the blockchain.

http://bitcoin.stackexchange.com/questions/3059/what-is-a-compressed-bitcoin-key/3839#3839

2. It is high for both codes (as it just generated).

sr. member
Activity: 363
Merit: 250
Nevermind I fixed the problem. (ignore this message.)
legendary
Activity: 3416
Merit: 1912
The Concierge of Crypto
May I suggest the following improvements:

1. Compressed keys for all output of paper wallet and bulk wallet, as an option. (Might as well include all other wallets, single wallets, brain wallets, vanity, etc.)
2. Choose a level of error correction for the QR codes. I prefer High or 30%. What is the level right now for version 2.4 ?
sr. member
Activity: 437
Merit: 415
1ninja
I came across an unusual problem with your website - if you put in a private key that is less than 64 characters long, it doesn't recognise it as a proper private key. For example, this works:

18E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

This doesn't:

E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

but this does:

00E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

As the private key is just a random number, it might be sensible to allow any string length to be able to represent a private key, not just those that are 64 characters long.

Bitcoin private keys are required to be 32 bytes. It is my understanding this number when represented in hex format should be zero padded so it is clear it represents 256 bits. It's also less risky to represent things this way for compatibility... in case the place you use your private key forgets to zero pad.
sr. member
Activity: 437
Merit: 415
1ninja
I might throw up a bounty to do an "intermediate code generator" as well.  (this won't be hard - just another simple recipe using scrypt,sha256,base58)

Here is what I imagine... another tab that says "Encrypted Wallets"

On the tab there would be two functions: generate intermediate code, and decrypt encrypted wallet

THe intermediate code takes a passphrase and makes a code (or series of codes) out of it.  The code can be used by someone else to generate bip38-encrypted paper wallets without knowing the passphrase.  Intermediate code generator takes a passphrase as input, and outputs a string that simply encodes 4 bytes of salt, 4 bytes of a combined "batch" and "sequence" number, and one compressed EC point.  The EC point is G * sha256(scrypt(passphrase, salt, 16384, 8, 8 ) + batch+sequence bytes) or something substantially similar.  The sequence number can be incremented to create more intermediate codes from the same passphrase without repeating the scrypt.
+1 ...I could really use this and would be willing to contribute to make it happen as well.  I just want the ability to create nicely printed paper wallets where the private key is encrypted.

Working on it Smiley
legendary
Activity: 3416
Merit: 1912
The Concierge of Crypto
Hi, can bitaddress make compressed private keys in the bulk wallet part? The ones that begin with Letters instead of number 5. (with corresponding public key of course.) I want to make a few hundred keys.
newbie
Activity: 11
Merit: 0
I have started on a new paper wallet design

I monkey-patched it into my "fork" of the bitadress html page, so you can look how it would look. I broke some other stuff (qr code sizing), but the paper wallets work and it is quick hack anyhow.

http://bitcoin.ars.is/paperwallet-art2.html

My plan would be to further develop the paperwallet design and also offer "blank" sheets to download as PDF so you have them printed professionally and then at home you use the generator with the "hide art" option to just print the codes and hashes.

Then the design of the paper and the functionality of bitaddress.org could be a bit more separated, it would be just a matter of supporting different layouts (as in: where to position the stuff). I.e. I could offer a few color variations on the design (I am thinking Euro-Note colours), but they don't need to clog the bitaddress.org repository.

If there is market for it, I would even offset print a batch of blanks on nice paper, possibly with some extra funky features (UV ink?) or even pre-perforation.

(If anyone is interested, the commits are on github, but as I said it is just a quick hack.)
newbie
Activity: 11
Merit: 0
higher resolution art would be nice. It's much too low for my taste.

Hi guys,

for the second installment of my "Bitcoin Vending Machine" art project I have started on a new paper wallet design. It is based on the current one (matches the size exactly) and I will try to integrate it into my bitadress fork to use it with the vending machine.

In the spirit of open sauce etc. I thought I'll also put it here, to get some feedback. I diverged from the original layout and text to make it more accessable. If you like it and want to put it into bitadrerss.org, I would certainly make the necessary modifications (like different URLs).


http://image.bayimg.com/91dda23369518e4580629359d92ec34e9d39fb47.jpg
hero member
Activity: 836
Merit: 1030
bits of proof
I came across an unusual problem with your website - if you put in a private key that is less than 64 characters long, it doesn't recognise it as a proper private key. For example, this works:

18E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

This doesn't:

E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

but this does:

00E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

As the private key is just a random number, it might be sensible to allow any string length to be able to represent a private key, not just those that are 64 characters long.

I guess it interprets E14... as negative number (sign bit set) wheras 00E14 is positive. I run into the same in Java, likely present in JavaScript BitInteger class.
sr. member
Activity: 444
Merit: 313
I came across an unusual problem with your website - if you put in a private key that is less than 64 characters long, it doesn't recognise it as a proper private key. For example, this works:

18E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

This doesn't:

E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

but this does:

00E14A7B6A307F426A94F8114701E7C8E774E7F9A47E2C2035DB29A206321725

As the private key is just a random number, it might be sensible to allow any string length to be able to represent a private key, not just those that are 64 characters long.
hero member
Activity: 868
Merit: 1008
I might throw up a bounty to do an "intermediate code generator" as well.  (this won't be hard - just another simple recipe using scrypt,sha256,base58)

Here is what I imagine... another tab that says "Encrypted Wallets"

On the tab there would be two functions: generate intermediate code, and decrypt encrypted wallet

THe intermediate code takes a passphrase and makes a code (or series of codes) out of it.  The code can be used by someone else to generate bip38-encrypted paper wallets without knowing the passphrase.  Intermediate code generator takes a passphrase as input, and outputs a string that simply encodes 4 bytes of salt, 4 bytes of a combined "batch" and "sequence" number, and one compressed EC point.  The EC point is G * sha256(scrypt(passphrase, salt, 16384, 8, 8 ) + batch+sequence bytes) or something substantially similar.  The sequence number can be incremented to create more intermediate codes from the same passphrase without repeating the scrypt.
+1 ...I could really use this and would be willing to contribute to make it happen as well.  I just want the ability to create nicely printed paper wallets where the private key is encrypted.
legendary
Activity: 1708
Merit: 1020
I might throw up a bounty to do an "intermediate code generator" as well.  (this won't be hard - just another simple recipe using scrypt,sha256,base58)

Here is what I imagine... another tab that says "Encrypted Wallets"

On the tab there would be two functions: generate intermediate code, and decrypt encrypted wallet

THe intermediate code takes a passphrase and makes a code (or series of codes) out of it.  The code can be used by someone else to generate bip38-encrypted paper wallets without knowing the passphrase.  Intermediate code generator takes a passphrase as input, and outputs a string that simply encodes 4 bytes of salt, 4 bytes of a combined "batch" and "sequence" number, and one compressed EC point.  The EC point is G * sha256(scrypt(passphrase, salt, 16384, 8, 8 ) + batch+sequence bytes) or something substantially similar.  The sequence number can be incremented to create more intermediate codes from the same passphrase without repeating the scrypt.

standardized encrypted paper wallets would be nice


v2.4
https://www.bitaddress.org/bitaddress.org-v2.4-SHA1-1d5951f6a04dd5a287ac925da4e626870ee58d60.html
 - French translations thanks to blockgenesis.

Up next is the BIP38 stuff.

+1

higher resolution art would be nice. It's much too low for my taste.
Pages:
Jump to: