Skip to main content
8 events
when toggle format what by license comment
Feb 26, 2021 at 5:19 history edited Ava Chow CC BY-SA 4.0
added 1091 characters in body
Feb 26, 2021 at 5:11 comment added Ava Chow @CedricMartin Indeed. This answer was written assuming that the mnemonics actually encoded the same entropy, but they actually do not. I will edit this answer.
Feb 26, 2021 at 3:03 comment added Cedric Martin @Andrew Chow Your answer is incorrect. A careful reading of BIP39 shows that his second phrase is totally valid for the first 4 bits of the sha256 of the first eleven words + 7 bits of "acoustic" are equal to the remaining 4 bits of "acoustic". What the BIP39 is referring to when talking about invalid checksums is, well, if the checksum is invalid (as when before mnemonic seeds were used and, say, plain random 256 bits were used).
Feb 1, 2018 at 17:25 vote accept Ryan Ellis
Feb 1, 2018 at 17:25 comment added Ryan Ellis I was actually using Ian's BIP39 tool, and not the code referenced above. I'll need to test this other code out. Thanks again!
Feb 1, 2018 at 17:17 comment added Ryan Ellis So really ledger's tool for BIP39 generation, ledgerwallet.com/support/bip39-standalone.html (looks like a copy of Ian's tool) has a technically incorrect implementation. This is because BIP39 states that if an invalid checksum the software should say so. The code at: github.com/bitcoinjs/bip39/blob/master/index.js#L78 Line 76-78 splits the ENT & CS from the binary of mnemonic. Then Line 87 calls the function to generate the checksum from entropy, and compares it to the mnemonic phrase. Line 88 should throw the invalid checksum error, but doesn't. Not sure why
Feb 1, 2018 at 17:03 comment added Ryan Ellis Thanks for this. This is interesting. Edits coming (hit enter too soon)
Feb 1, 2018 at 6:10 history answered Ava Chow CC BY-SA 3.0