Wallet.dat | Bitcointalksearch.org

Kaonashi1993

jr. member

Activity: 97

Merit: 3

Sorry for being so persistent to look at the encrypted wallet.dat, happen is all I'm looking was bytes after bytes after bytes just add the randomness could make someone paranoid as myself Huh

but foremost thank you being there to answer dumb question and ignorant knowledge which oneself had, still eager to learn so much, I'll locking the thread now,

Quote from: achow101 on April 01, 2020, 06:04:51 PM

There is absolutely nothing in the wallet.dat that will reveal what the passphrase is. There is no encoding information, no metadata, nothing. The passphrase is taken in as a series of bytes, hashed and turned into pseudorandom bytes which is then used to encrypt another series of randomly generated bytes which is what actually encrypts the private keys. NONE of the bytes derived from the passphrase is even stored in the wallet at all. It's all held in memory and purged when no longer needed. The actual encryption key is not text nor is it the passphrase. It's just random data.

Again, as has been repeated so many times to you. use btcrecover to brute force the passphrase. Inspecting the wallet.dat file by hand is not useful and is not going to help you.

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

There is absolutely nothing in the wallet.dat that will reveal what the passphrase is. There is no encoding information, no metadata, nothing. The passphrase is taken in as a series of bytes, hashed and turned into pseudorandom bytes which is then used to encrypt another series of randomly generated bytes which is what actually encrypts the private keys. NONE of the bytes derived from the passphrase is even stored in the wallet at all. It's all held in memory and purged when no longer needed. The actual encryption key is not text nor is it the passphrase. It's just random data.

Again, as has been repeated so many times to you. use btcrecover to brute force the passphrase. Inspecting the wallet.dat file by hand is not useful and is not going to help you.

Kaonashi1993

jr. member

Activity: 97

Merit: 3

This is a bit late but I'm not trying to find whatever resemblance to let's say privatekey or any other key what I'm trying to achieve here is, finding the password been used to lock the wallet.dat if there is any indication inside the format of Berkeley that will tell this is the password been used ANCII, UTF8 or anything related hieroglyph and so forth,

I'd try to open the wallet.dat file on bitcoincore and all it's information was the wallet purpose is unknown as you may refer to my other thread https://bitcointalksearch.org/topic/m.54097168

I've tackling this wallet for a longer period of time and I might also quit my job decoding this wallet,

HCP

legendary

Activity: 2086

Merit: 4361

Quote from: walletrecovery on March 31, 2020, 12:02:45 PM

Which language was used for encryption is impossible, but inside the wallet there is a lot of information that may indirectly relate to resources that have a trace of the language spoken by the wallet owner.

As achow101 said... you don't need to mess about with the pywallet dump or inspecting the wallet.dat file. Even an encrypted/locked wallet.dat can be loaded and viewed in Bitcoin Core without knowing the passphrase.

You only need to use the passphrase should you wish to do anything involving the "private" data... that is to say, any action requiring access to private keys (such as dumping the wallet.dat, signing a transaction, exporting private keys etc).

So, if you simply put the wallet.dat in the Bitcoin Core data directory and start Bitcoin Core, you'll be able to see the entire transaction history, all the addresses AND any labels that were given to addresses/transactions.

walletrecovery

copper member

Activity: 419

Merit: 29

Quote from: Kaonashi1993 on March 24, 2020, 11:45:53 PM

is there a possibility or any program would know what character (en,ru,chi,jpn,etc..) I've used to lock my wallet.dat on bitcoin core anyone who can answer would be a great relief for me I've seen some topic ago here on bitcointalk don't know if this by gavinandersen who's by his program would know if its a general ASII encoding locking this said wallet,

Kaonashi1993

Which language was used for encryption is impossible, but inside the wallet there is a lot of information that may indirectly relate to resources that have a trace of the language spoken by the wallet owner.

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

Quote from: ewaspiro on March 27, 2020, 12:50:42 PM

The questions was not regarding decryption but ways figure out language used and seeing the label is the best shot.

I have experience of pywallet.py dump and I believe its the best way to see if you can figure put language if the person creating the wallet DID label it.

peace.

Then tell him to open it up in Bitcoin Core where it displays the labels for you! No need to inspect the wallet.dat or use pywallet.

ewaspiro

member

Activity: 74

Merit: 10

Quote from: achow101 on March 26, 2020, 10:27:39 PM

Quote from: keychainX on March 25, 2020, 07:55:33 AM

In some cases the label of your wallet address is in plain text inside the wallet.dat

Open the wallet.dat with a texteditor like notepad in windows or textedit on mac

Inspecting the wallet.dat file will not help him decrypt the wallet. It is pointless to try to do that and will result in extreme confusion and lead nowhere.

If you have forgotten your passphrase completely, there is nothing that you can do to unlock the wallet. If you have some memory of what the passphrase could be, you could try using the btcrecover[url] utility to try to brute force the passphrase. But it probably will not succeed if you have no idea what the passphrase could be.

The questions was not regarding decryption but ways figure out language used and seeing the label is the best shot.

I have experience of pywallet.py dump and I believe its the best way to see if you can figure put language if the person creating the wallet DID label it.

peace.

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

Quote from: keychainX on March 25, 2020, 07:55:33 AM

In some cases the label of your wallet address is in plain text inside the wallet.dat

Open the wallet.dat with a texteditor like notepad in windows or textedit on mac

Inspecting the wallet.dat file will not help him decrypt the wallet. It is pointless to try to do that and will result in extreme confusion and lead nowhere.

If you have forgotten your passphrase completely, there is nothing that you can do to unlock the wallet. If you have some memory of what the passphrase could be, you could try using the btcrecover utility to try to brute force the passphrase. But it probably will not succeed if you have no idea what the passphrase could be.

nc50lc

legendary

Activity: 2534

Merit: 6080

Self-proclaimed Genius

Quote from: Kaonashi1993 on March 25, 2020, 08:47:04 PM

-gibberish data- mkey 1 0qﾑG・ﾖｴ.ｱ釗g2+`蠇w交ﾌ・Zp・睡pﾗM・秧Xﾍkｼc' ckey!貼ｮQﾞ０s0ｷ7ｱ・・・evv -gibberish data-

Those characters are just the interpretation of whatever text editor that you've used to open the wallet.dat file.

If it's configured to use 'Unicode', 'ANSII' or 'UTF-8', then it will encode whatever it can find that matched the byte-representation of that characters.
Other parts that didn't have any "match" are the ''.

In short: Your Notepad is guessing the contents of your wallet.dat file.

Kaonashi1993

jr. member

Activity: 97

Merit: 3

this is what I've seen on my wallet so far any indications? ( name"1HwYQZ82uAitbV8gfVuWXrtwFRhLA2uWQ2 ( name"15mXhu5uNRfHTKofoThesNpUQFKhoHYewq C 0・ﾀﾂMⅵ2ﾈ・8_s彩ﾎzﾅ
・rｶ鴈カﾉｨ[qd#・Hﾐ叟・F・f・ﾋ･ n・ mkey 1 0qﾑG・ﾖｴ.ｱ釗g2+`蠇w交ﾌ・Zp・睡pﾗM・秧Xﾍkｼc' ckey!貼ｮQﾞ０s0ｷ7ｱ・・・evvJ ｮ・｢・ 1 0肯#赦・・・ｹﾟP・;・Ｏh劦組Rﾔ`ﾊqﾜ瘍~:｣ﾏ' ckey!匤風^1i QViD・ﾌ"QｵﾘU傅評ｶ 1 0ﾈa=ﾉｴ･ｻ淕&_・俎段Q・昤J郛]・・Jｵﾁ・ﾟBV・' ckey!肢ﾀCﾕｻ旡ﾂCｿ鯰6pB・C偂ﾊ| 1 0vy・p・・ｭﾛ便｢瀾ﾑY･yﾔTｵ[M*・・ J

keychainX

member

Activity: 378

Merit: 53

Telegram @keychainX

Quote from: Kaonashi1993 on March 24, 2020, 11:45:53 PM

is there a possibility or any program would know what character (en,ru,chi,jpn,etc..) I've used to lock my wallet.dat on bitcoin core anyone who can answer would be a great relief for me I've seen some topic ago here on bitcointalk don't know if this by gavinandersen who's by his program would know if its a general ASII encoding locking this said wallet,

Kaonashi1993

In some cases the label of your wallet address is in plain text inside the wallet.dat

Open the wallet.dat with a texteditor like notepad in windows or textedit on mac

Search for the string "name" following this string usually there is the address and in same cases a wallet label.

I have encountered labels in english, chinese and English

You can also use pywallet on github to dump the wallet info into a json file and the label will also show up, this is more technical and you need python 2.7 installed. You can find pywallet on github.com

/KX

Abdussamad

legendary

Activity: 3682

Merit: 1580

the password is salted and run through a hash function and the hash is then used to encrypt the wallet file. so the password isn't stored in the wallet file and there's no way to know what characters were in it.

if you have some idea what the password might be what you can do is make a list of possible passwords to narrow down the possibilities and then use a program to bruteforce the password. maybe hashcat or btcrecover can be used for this purpose

squatter

legendary

Activity: 1666

Merit: 1196

STOP SNITCHIN'

Quote from: Kaonashi1993 on March 24, 2020, 11:45:53 PM

is there a possibility or any program would know what character (en,ru,chi,jpn,etc..) I've used to lock my wallet.dat on bitcoin core anyone who can answer would be a great relief for me I've seen some topic ago here on bitcointalk don't know if this by gavinandersen who's by his program would know if its a general ASII encoding locking this said wallet,

Kaonashi1993

I don't think so. That would require breaking AES-256, which is presently considered unbreakable by brute force.

Non-ASCII characters are allowed, so you've got some very large word lists to consider.

Kaonashi1993

jr. member

Activity: 97

Merit: 3

is there a possibility or any program would know what character (en,ru,chi,jpn,etc..) I've used to lock my wallet.dat on bitcoin core anyone who can answer would be a great relief for me I've seen some topic ago here on bitcointalk don't know if this by gavinandersen who's by his program would know if its a general ASII encoding locking this said wallet,

Kaonashi1993

Topic: Wallet.dat (Read 430 times)