For key generation it would probably be more useful to use things that aren't easily accessible, such as a retina scan. Now that would be nice, either for generation or accessing funds
Topic: Fingerprint private key - page 2. (Read 1449 times)
I don't see how could this be useful. I only see fingerprints useful to access funds, and we already have that (things like TouchID).
For key generation it would probably be more useful to use things that aren't easily accessible, such as a retina scan. Now that would be nice, either for generation or accessing funds
For key generation it would probably be more useful to use things that aren't easily accessible, such as a retina scan. Now that would be nice, either for generation or accessing funds
I burnt my finger on a wood stove... my lappy reader had difficulty reading the print.
I would be worried not only about creating it online, but the inherent security of finger print scanners. I bought one to experiment with security for my laptop. It was cool. But once it was working properly the hacker in me set out to defeat it. Unfortunately it was easy. I lifted my print from a drinking glass with Scotch tape and pencil lead dust (not even superglue vapor). I placed the tape on a different finger and scanned it. It was far too easy. 
I doubt there is any serious work beeing done in that direction. The main problem with fingerprints is that you leave them literally everywhere. Every glass you use could be used to gather your fingerprints. You would end up with a private key which is only protected by a password. We already got that, its called a brainwallet.
That makes sense, it definitely isnt a safe way to store a private key. I was trying to think about someway to store a private key without the need of writing things somewhere(that can get lost) or of remembering long paraphrases.
As for OP using a fingerprint is not safe. You leave so many fingerprints everywhere. One could easily follow you and extract one (if you live in a crowded city) without you noticing it.
Are you asking about a PGP fingerprint or the print that one of your fingers leaves behind? If it was the former then sure, but I would just make sure that the password is very strong as you would essentially be creating a brain wallet with a bunch of random numbers/letters in the beginning. I would think the risk of a brain wallet farmer trying to hack a brainwallet with a PGP fingerprint in the prefix is somewhat small because there are so many PGP keys out there, and you wouldn't even need to necessarily need to use one that is found on a keys sever anywhere.
If you wanted to use the print that your finger leaves behind then there would be a number of risks and would probably not be a good idea. The primary drawback is that you will need some kind of specialized hardware to convert a portion of your fingerprint into a number, and if the manufacturer of such hardware were to go out of business then there would be a good chance that you would lose access to your Bitcoin.
If the people behind, say armory, or electrum were to disappear then as long as you have the unencrypted seed and the formula (code) that armory uses to calculate each new private key then you can still calculate your private keys and access your Bitcoin.
If you wanted to use the print that your finger leaves behind then there would be a number of risks and would probably not be a good idea. The primary drawback is that you will need some kind of specialized hardware to convert a portion of your fingerprint into a number, and if the manufacturer of such hardware were to go out of business then there would be a good chance that you would lose access to your Bitcoin.
If the people behind, say armory, or electrum were to disappear then as long as you have the unencrypted seed and the formula (code) that armory uses to calculate each new private key then you can still calculate your private keys and access your Bitcoin.
I mean, of course we cant rely on a website. I just would like to know if there is someone already working on this idea.
I doubt there is any serious work beeing done in that direction. The main problem with fingerprints is that you leave them literally everywhere. Every glass you use could be used to gather your fingerprints. You would end up with a private key which is only protected by a password. We already got that, its called a brainwallet.
That makes sense, it definitely isnt a safe way to store a private key. I was trying to think about someway to store a private key without the need of writing things somewhere(that can get lost) or of remembering long paraphrases.
Hello,
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
That is a pretty cool idea, I have not heard of anyone doing this yet. The biggest thing is how much Entropy a Fingerprint actually has. Some quick research shows that it should be possible to generate a series of numbers from a fingerprint 'reproducibly'. If you set a specific % matching thresholds 'noise' in the software capturing the fingerprint, lowering the threshold to generate a number from a fingerprint does reduce the amount of entropy available. Some estimates 40 - 80 Bits of Entropy. Kind of a wide range, but should still be large enough source for private key generation.
Here is some information posted a year ago by someone that is relevant:
http://www.reddit.com/r/crypto/comments/1fpobr/how_many_bits_of_security_in_a_fingerprint_as_in/
Enhancing security and privacy in biometrics-based authentication systems - http://www.cedar.buffalo.edu/~govind/CSE717/papers/CancelableBiometrics.pdf
How to Generate Strong Keys from Biometrics and Other Noisy Data - http://www.cs.bu.edu/~reyzin/fuzzy.html
Edit: Fixed Spelling
The idea would be to create the private key using the fingerprint associated with a small paraphrase, so we can achieve a good entropy without needing to remember 12 random words.
I mean, of course we cant rely on a website. I just would like to know if there is someone already working on this idea.
I doubt there is any serious work beeing done in that direction. The main problem with fingerprints is that you leave them literally everywhere. Every glass you use could be used to gather your fingerprints. You would end up with a private key which is only protected by a password. We already got that, its called a brainwallet.
I mean, of course we cant rely on a website. I just would like to know if there is someone already working on this idea.
Hello,
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
It's not really an useful way to do this. Any website that offers this could scam you (anyone that knows your priv key can steal from you). A vanity gen based on fingerprint and password would have to run on a computer. And then you'll have to rely on a 3rd party app (prolly on your phone / tablet) that will read the fingerprint, then transfer that data on the computer where another program will take that data to generate the "private key". Who would use that?!
Hello,
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
That is a pretty cool idea, I have not heard of anyone doing this yet. The biggest thing is how much Entropy a Fingerprint actually has. Some quick research shows that it should be possible to generate a series of numbers from a fingerprint 'reproducibly'. If you set a specific % matching thresholds 'noise' in the software capturing the fingerprint, lowering the threshold to generate a number from a fingerprint does reduce the amount of entropy available. Some estimates 40 - 80 Bits of Entropy. Kind of a wide range, but should still be large enough source for private key generation.
Here is some information posted a year ago by someone that is relevant:
http://www.reddit.com/r/crypto/comments/1fpobr/how_many_bits_of_security_in_a_fingerprint_as_in/
Enhancing security and privacy in biometrics-based authentication systems - http://www.cedar.buffalo.edu/~govind/CSE717/papers/CancelableBiometrics.pdf
How to Generate Strong Keys from Biometrics and Other Noisy Data - http://www.cs.bu.edu/~reyzin/fuzzy.html
Edit: Fixed Spelling
Hello,
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
i wouldnt create my private key on any kind of website because most likely i would get scammed I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
Hello,
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
I was wondering if there is any way for me to create a private key using only my fingerprint and a password. Do you guys know if there is already a website to do so ?
Thanks.
Jump to: