Pages:
Author

Topic: Brainwallet (Read 1474 times)

legendary
Activity: 3038
Merit: 1032
RIP Mommy
July 21, 2015, 06:49:33 PM
#24
For shits and giggles, I just went page by page through the book on my desk and took the word at the top right of each page:
generalized tissue they do when irritating with single anxious perceived exhaustion
legendary
Activity: 1078
Merit: 1011
July 21, 2015, 03:52:19 PM
#23
Well one good way to choose random words, but still have it mean something to you. Use a mnemonic, something like "stinky pie" to remember than come up with a phrase using words you will remember.

S - Swedish
T - Tacos
I - Irradiate
N - Nicely
K - Kombined  (can be a form of a real word, more random)
Y - Yearly
P- Performance
I - Indicative
E - Earnings

So your paraphrase would be: swedishtacosirradiatenicelykombinedyearlyperformanceindicativeearnings

You can also add spaces, symbols and numbers to taste, maybe all e's become *, or perhaps every 3rd "e", and maybe every Fibonacci place is capitalized (1,2,3,5,8,13,21,34th place letters, etc.).

Important thing is something you can remember without having to write it down.
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
July 21, 2015, 03:23:52 PM
#22
It was the https://en.wikipedia.org/wiki/Canadian_Oxford_Dictionary , just flipped to random pages and chose from a location.

*emphasis mine*

How can you tell you actually flipped to "random pages" and did not do it according to some pattern you're (so far) unaware of? Humans are too predictable to take them at face value when it comes to randomness.

Same goes for word selection on each chosen page.

As it has been mentioned above, I'd try to incorporating some dice into your page and word selection.

Its so easy to use dice for this. Count number of pages, find enough dice with the proper sides to map that number as close as possible. If you ever played pen&paper you probably are prepared for this. Repeat for words on that page.
legendary
Activity: 3472
Merit: 1722
July 21, 2015, 03:19:18 PM
#21
It was the https://en.wikipedia.org/wiki/Canadian_Oxford_Dictionary , just flipped to random pages and chose from a location.

*emphasis mine*

How can you tell you actually flipped to "random pages" and did not do it according to some pattern you're (so far) unaware of? Humans are too predictable to take them at face value when it comes to randomness.

Same goes for word selection on each chosen page.

As it has been mentioned above, I'd try to incorporating some dice into your page and word selection.
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
July 21, 2015, 02:37:41 PM
#20
assuming each character is one of 128 possible ASCII characters,
then each one adds at most 7 bits of entropy if done in a random
manner.

adding specific characters in specific places that you mention
in a forum, less so.
legendary
Activity: 1722
Merit: 1000
July 21, 2015, 02:25:52 PM
#19
Everything I read suggests I use a random word generator...

Why is randomly picking words from a dictionary un advised?

The point of a BRAIN wallet is that you could, under any circumstances recover the wallet as long as the passphrase to generate the seed is inside your brain. This means that, if your pass it too complex its useless because you will forget it, if its too predictable its useless because you will lose it against a brute force attack of some sort. Randomly generated words are a good intermediate.


Wouldn't adding ╚  and ╔ to the front and back insanely increase the brute force attack time frame?
legendary
Activity: 868
Merit: 1006
July 21, 2015, 12:46:13 PM
#18
Everything I read suggests I use a random word generator...

Why is randomly picking words from a dictionary un advised?

The point of a BRAIN wallet is that you could, under any circumstances recover the wallet as long as the passphrase to generate the seed is inside your brain. This means that, if your pass it too complex its useless because you will forget it, if its too predictable its useless because you will lose it against a brute force attack of some sort. Randomly generated words are a good intermediate.
full member
Activity: 235
Merit: 100
July 21, 2015, 12:33:38 PM
#17
probably you'll became an victim of 'dictionary attack' Tongue
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
July 21, 2015, 12:22:29 PM
#16
Everything I read suggests I use a random word generator...

Why is randomly picking words from a dictionary un advised?

if you pick them truly random then it is good , the thing that is not advised is using a phrase , or sentence because it can be guessed.

for example if you choose a catch phrase from a movie or something like that it can be in a dictionary used by a simple code to brute force the password and hack the private key.

sweet!!  No complete random, just going to random pages, no phases, the dictionary I used has over 200k words... LMAO!

It is actually better to use a smaller dictionary and more words, because it will be easier to remember.
If you have some weird words you're not familiar with, you could have trouble recalling them later.
Just a consideration.

As far as how many words you need, its pretty simple.  You want 128-160 bits of entropy.
Less than 128, you're risking a potential brute force attack, and more than 160 is overkill
because there's only 2^160 addresses.

2^128 ~= 3.4 x 10^39
2^160 ~= 1.4 x 10^49

So you follow the formula X^Y > 2^128, where X is the number of words in your
dictionary and Y is the number of words in your phrase. 

For example, if you have 200,000 words, as you say, then you should use 8 words.
200,000^8 > 2^128.

If you have a dictionary with 5,000 words, you should use 11 words.

legendary
Activity: 3542
Merit: 1352
Cashback 15%
July 21, 2015, 12:05:40 PM
#15
It is unadvised mainly because it lacks true randomness. It can easily be guessed by hackers if they want to, especially if it's a common phrase, a sentence, a quotation or any saying. Never ever store large amounts of bitcoins in a brainwallet because they are more prone to hacking compared to a traditional bitcoin wallet.
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
July 21, 2015, 11:59:15 AM
#14
Why is randomly picking words from a dictionary un advised?

Because it does not have enough randomness. For one, there will be no numbers or symbols in dictionary words. It is like having a internet bank account protected by a short password consist of only alphabets.

Do not store large amount of coins on an address generated by brainwallet. It is easier to "guess" by hackers.

numbers or symbols not required.  picking random words from a dictionary is fine as long as you pick enough words.

And use dice.

agree.
Dice would add more security as it would ensure the page flipping and word selection is not biased.
legendary
Activity: 1722
Merit: 1000
July 21, 2015, 08:10:04 AM
#13
Everything I read suggests I use a random word generator...

Why is randomly picking words from a dictionary un advised?

if you pick them truly random then it is good , the thing that is not advised is using a phrase , or sentence because it can be guessed.

for example if you choose a catch phrase from a movie or something like that it can be in a dictionary used by a simple code to brute force the password and hack the private key.

sweet!!  No complete random, just going to random pages, no phases, the dictionary I used has over 200k words... LMAO!
legendary
Activity: 1022
Merit: 1008
Delusional crypto obsessionist
July 21, 2015, 08:01:48 AM
#12
Why is randomly picking words from a dictionary un advised?

Because it does not have enough randomness. For one, there will be no numbers or symbols in dictionary words. It is like having a internet bank account protected by a short password consist of only alphabets.

Do not store large amount of coins on an address generated by brainwallet. It is easier to "guess" by hackers.

numbers or symbols not required.  picking random words from a dictionary is fine as long as you pick enough words.

And use dice.
legendary
Activity: 1946
Merit: 1137
July 21, 2015, 07:57:24 AM
#11
Everything I read suggests I use a random word generator...

Why is randomly picking words from a dictionary un advised?

if you pick them truly random then it is good , the thing that is not advised is using a phrase , or sentence because it can be guessed.

for example if you choose a catch phrase from a movie or something like that it can be in a dictionary used by a simple code to brute force the password and hack the private key.
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
July 20, 2015, 10:17:47 PM
#10
Why is randomly picking words from a dictionary un advised?

Because it does not have enough randomness. For one, there will be no numbers or symbols in dictionary words. It is like having a internet bank account protected by a short password consist of only alphabets.

Do not store large amount of coins on an address generated by brainwallet. It is easier to "guess" by hackers.

numbers or symbols not required.  picking random words from a dictionary is fine as long as you pick enough words.
hero member
Activity: 672
Merit: 500
July 20, 2015, 05:59:51 PM
#9
Why is randomly picking words from a dictionary un advised?

Because it does not have enough randomness. For one, there will be no numbers or symbols in dictionary words. It is like having a internet bank account protected by a short password consist of only alphabets.

Do not store large amount of coins on an address generated by brainwallet. It is easier to "guess" by hackers.
legendary
Activity: 1722
Merit: 1000
July 20, 2015, 05:48:03 PM
#8
The first and the second sentence are more or less the same thing (assuming the process or generating and picking are both actually random and it's not too short, e.g. 10 words from a set of 5k words is going to be more than enough)), but I'm going to have to assume we both have a different definition of "randomly picking words" - your method not having much to do with randomness.

The answer to your question is very simple - it is unadvised because >99% of people are going to be picking words non-randomly, oblivious to their biases.

It was the https://en.wikipedia.org/wiki/Canadian_Oxford_Dictionary , just flipped to random pages and chose from a location.
legendary
Activity: 1722
Merit: 1000
July 20, 2015, 05:46:11 PM
#7
Everything I read suggests I use a random word generator...

Why is randomly picking words from a dictionary un advised?

Well, that is what a random word generator does. Why do you think it is unadvised?

That's what I was thinking!! I chose a large one lol.
newbie
Activity: 52
Merit: 0
July 20, 2015, 05:37:51 PM
#6
I don't understand why you would use a dictionary when there are perfectly good word generators?
hero member
Activity: 576
Merit: 503
July 20, 2015, 05:18:11 PM
#5
If you use a dictionary, make sure you don't end up using them in alphabetical order just because you started at the beginning Wink

or mostly near the middle coz you think it's non-random to select the first or last pages

Pages:
Jump to: