1

If I have my coins on address A, send it to address B from the same private key, is anyone able to say "these two addresses belong to the same wallet" with certainty? Because of the public key that would be the same?

Or can that only be done, as soon as the first time, coins move away from address B?

1 Answer 1

2

No one can tell whether two addresses were generated from the same HD seed or generated by the same wallet. The process is designed to produce addresses in a way that is mathematically indistinguishable from completely random processes.

It is only when you create a transaction that involves both addresses that people may be able to begin to make inferences about the posssible relationships of those addresses.


For the most common types of transactions, every new address corresponds to a new pair of public key and private key. Early wallets generated a new pair randomly but HD wallets (Since BIP-32 adoption) generate them deterministically. In either case the actual keys and associated addresses are indistinguishable from random numbers and no association can be determined between different private keys, between different public keys or between different addresses. You cannot discover a private key from a public key. You cannot determine, from the keys alone, whether two public keys were generated by a common source or from common source material.

8
  • Yes, but that would not be a "technical proof". Say you move coins from address A to B and claim they are no longer in your hands, then you move them to address C, isn't the public key at that point known for both addresses, and if it's the same, it's easy to tell that address A and B belong to the same wallet?
    – codepleb
    May 31, 2023 at 11:19
  • @codepleb: For a given address-type, every distinct address has a different public key. May 31, 2023 at 11:54
  • Ok that cleans up a lot of things. If you do transactions from A to B to C to D... Will your security become weaker, if an attacker might know if those belong to the same private key? Meaning, will it be easier for them to "reverse engineer the private key"? Meaning that it might be easier and easier, the more public keys you have, to find the private key behind it. Or is that wrong?
    – codepleb
    Jun 1, 2023 at 11:25
  • @codepleb: No. A,B,C & D also have different private keys. So far as I know, knowledge of A,B,C & D is no help in finding any corresponding private keys and no help in finding the master private key of an HD wallet. Jun 1, 2023 at 14:59
  • What? They have different private keys? You mean that the "seed" will generate new private keys each time you generate a new address or something like this? And I'm sure that might count for modern wallets, but was that always like that? Never heard that this is the case.
    – codepleb
    Jun 2, 2023 at 7:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.