Author

Topic: Can I create a deterministic wallet and export/disclose individual keys? (Read 337 times)

newbie
Activity: 24
Merit: 2
Ah, of course, that makes sense now. Thanks for taking the time. That was a potential vulnerability I'd missed but will now take into account.
legendary
Activity: 3640
Merit: 1345
Armory Developer
The chaincode is wallet specific. Public member means it is treated as publicly exposed data in the wallet. It is never encrypted and carried around in WO wallets. To put this in a realistic scenario, an attacker with your WO wallet and a single private key on the derivation chain can reveal the entire private chain.
newbie
Activity: 24
Merit: 2
Thanks. I thought the chaincode was wallet-specific. I'll have to do more reading...
legendary
Activity: 3640
Merit: 1345
Armory Developer
https://github.com/goatpig/BitcoinArmory/blob/master/cppForSwig/EncryptionUtils.cpp#L825

Code is self explanatory. Public key N+1 is derived from (public key N) x Chaincode. The chaincode is a public member. If you want an ELI5, search this forum, there are a few written.
newbie
Activity: 24
Merit: 2
If a private key on an Armory address chain gets compromised, consider the whole wallet compromised.

If you have the time, would you mind explaining why? Or point us to an explanation? Is there even a way to know that an address has been generated from a seed? Thanks.
legendary
Activity: 3640
Merit: 1345
Armory Developer
If a private key on an Armory address chain gets compromised, consider the whole wallet compromised.
newbie
Activity: 19
Merit: 1
If one private key of a deterministic wallet gets compromised, are the other keys (and the seed) still secure?

Example: create an armory offline wallet with seed. In this case armory 0.90-beta installed in ubuntu 12.04 offline computer.

I want to transfer some BTC from one address in the offline armory wallet by importing the private key for one of the addresses in the offline wallet to a Bitcoin Core online wallet for whatever reason. If the private key is somehow compromised, are the remaining BTC on different addresses in the same armory offline wallet still secure (same seed)? Thanks!!
Jump to: