Take the 2-minute tour ×
Bitcoin Stack Exchange is a question and answer site for Bitcoin crypto-currency enthusiasts. It's 100% free, no registration required.

I wonder if it's safe to use JavaScript generator available at bitaddress.org. Even if I'll generate it offline, how can I know if the algorithm is not using any pre-computed / pre-planned way of generating the addresses?

share|improve this question
add comment

1 Answer

It is good to consider the security of a system in which you are relying.

The HTML and Javascript served is not obfuscated so the code is easily verified.

While there have been no formal security audits, at least not that I'm aware of, there are many people with strong skills in cryptography, programming, math and security that have looked at the code.

The method used to generate an address draws from other open source tools (e.g., Crypto-JS) as well as a subset of Bouncy Castle for the ECSDA ported to Javascript. In other words, BitAddress isn't doing anything that hasn't already been implemented elsewhere, it just implements them in Javascript.

share|improve this answer
    
That said, unless you use a browser extension like blockchain's one, you are never really safe chrome.google.com/webstore/detail/my-wallet-verifier/… –  Lohoris Mar 29 '13 at 17:49
    
Related .. how to verify the source is authentic: bitcoin.stackexchange.com/a/9115/153 –  Stephen Gornick Apr 4 '13 at 23:08
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.