Author

Topic: Is having amounts larger than 25 BTC in a wallet a security problem? (Read 827 times)

full member
Activity: 125
Merit: 100
With the current difficulty, it takes an average of 9.4x1018 tries to solve a block. It takes on average 2159 tries to guess the private key for a bitcoin address, which is 77,739,448,794,196,963,734,238,554,931 times more difficult. So, if it takes 10 minutes to solve a block, it would take only 1,478,048,688,002,832,225,534,994 years to guess a bitcoin address. Mining looks much more profitable to me even if the block reward is only 1 satoshi.
Only 1,478,048,688,002,832,225,534,994 years ? Pff, easiest s..t in my life  Grin
legendary
Activity: 1792
Merit: 1111
Thank you for the answers.  I think it makes sense.  Again, please correct me if I am wrong.

1) The current difficulty of mining is 2,193,847,870 which is approximately 2^32
2) A valid transaction paired with the private key and converted into a 2^256 bit long hash.  Hence, brute force approach to crack a password has a difficulty of about 2^256.  Hence mining is 2^234 time easier than cracking a password.


And this still underestimates the difference because the ECDSA takes much more steps to calculate than SHA256
legendary
Activity: 4466
Merit: 3391
With the current difficulty, it takes an average of 9.4x1018 tries to solve a block. It takes on average 2159 tries to guess the private key for a bitcoin address, which is 77,739,448,794,196,963,734,238,554,931 times more difficult. So, if it takes 10 minutes to solve a block, it would take only 1,478,048,688,002,832,225,534,994 years to guess a bitcoin address. Mining looks much more profitable to me even if the block reward is only 1 satoshi.
legendary
Activity: 1173
Merit: 1000
hero member
Activity: 658
Merit: 500
Thank you for the answers.  I think it makes sense.  Again, please correct me if I am wrong.

1) The current difficulty of mining is 2,193,847,870 which is approximately 2^32
2) A valid transaction paired with the private key and converted into a 2^256 bit long hash.  Hence, brute force approach to crack a password has a difficulty of about 2^256.  Hence mining is 2^234 time easier than cracking a password.

Since there are only 21,000,000 BTC  mining is always more likely to produce better returns than trying to crack a password.

Again, thank you.



LOL did you finally take a sec to think? Bravo brother
newbie
Activity: 3
Merit: 0
Thank you for the answers.  I think it makes sense.  Again, please correct me if I am wrong.

1) The current difficulty of mining is 2,193,847,870 which is approximately 2^32
2) A valid transaction paired with the private key and converted into a 2^256 bit long hash.  Hence, brute force approach to crack a password has a difficulty of about 2^256.  Hence mining is 2^234 time easier than cracking a password.

Since there are only 21,000,000 BTC  mining is always more likely to produce better returns than trying to crack a password.

Again, thank you.

donator
Activity: 1218
Merit: 1079
Gerald Davis
Can somebody help me understand the flaws of my logic? 

You vast underestimate the amount of energy and time required to brute force a private key, not by a factor of a hundred or a thousand but by a factor of billions and billions.
legendary
Activity: 1120
Merit: 1012
sr. member
Activity: 434
Merit: 250
for me i keep them in a paper wallet.
newbie
Activity: 3
Merit: 0
I have a philosophical question here about the security of Bitcoin wallets.  I would appreciate anyone that can correct my logic in my thoughts below:

1- The blockchain is a public ledger.  Hence, while we cannot tell who owns the coins, we can tell what public address contains the most coins
2- While it is hard (without the private keys) to create a transaction that transfers BTC from one public address to another, it is easy to confirm that such a transaction is valid if generated with the proper keys.

Suppose that there is an unethical miner with a large amount of GH/s.  He knows that the reward is 25 BTC per block mined.
Now, the miner can see through the blockchain an address (call it XXX) with 250 BTC in it.  Let's assume that the private key is completely secure  (i.e. the legitimate owner has placed her wallet in cold storage or a paper wallet or other very secure mechanism). 

Instead of using the mining power to mine, the miner decides to use it to try to crack the private key of this particular address. 
The miner will simply test random private keys and attempt 1 BTC transfers to some address (say YYY).  The miner does not need to actually broadcast the transfer, based on statement 2 above, the miner can easily verify if the random test private key produces a valid transaction.

After some amount of effort e, the miner will eventually succeed in finding a private key that produces a valid transaction.  At that point the unethical miner can transfer the 250 BTC to his personal account.

As long as the effort e is less that required to mine 10 blocks (250/25) it is better for the miner to attack large wallets than to mine.

Based on the above I can only conclude that there is a value v above which any Bitcoin wallet becomes insecure (due to its vulnerability to attack).  This value is independent of how secure somebody tries to keep their wallet.

Can somebody help me understand the flaws of my logic? 

Thank you
Jump to: