more specifically, we use the code
https://github.com/mycelium-com/wallet/blob/master/public/mbw/src/main/java/com/mycelium/wallet/AndroidRandomSource.java
this is the random source used for all crypto operations (generating privkeys, generating R values in Transactions)
https://github.com/mycelium-com/wallet/blob/master/public/bitlib/src/main/java/com/mrd/bitlib/crypto/PrivateKey.java#L43
Topic: What is the RNG method of Mycelium? (Read 1527 times)
On android Mycelium uses /dev/urandom directly to pull random data. This way we are not affected by SecureRandom's buggy implementation.
You are referring to this?
https://bitcoin.org/en/alert/2013-08-11-android
Some more info here: http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html
https://bitcoin.org/en/alert/2013-08-11-android
Some more info here: http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html
I've been using Mycelium phone wallet to help out the local bitcoin economy for a week now. It's easy to use and I can't think of anything else to improve upon. I am curious to know what is the method used to generate the random values for private keys?
The reason why I'm asking is because I saw a 2013 article about a flaw in Android's RNG that makes private key generation on such platform vulnerable to theft. I'm sure Mycelium has accounted for this, but I'd like to know its RNG method.
The reason why I'm asking is because I saw a 2013 article about a flaw in Android's RNG that makes private key generation on such platform vulnerable to theft. I'm sure Mycelium has accounted for this, but I'd like to know its RNG method.
Jump to: