7

There is already a question that ask why you shouldn't reuse addresses, but it's about whether or not it's a bad idea for the person who would do the reusing. I understand there are several reasons you'd want to avoid reusing (e.g., fear that ECDSA isn't secure, privacy and anonymity concerns, difficulty of tracking senders, etc.); as far as I can tell, it's still sometimes worth it on an individual level to reuse an address.

However, the Bitcoin Wiki says in multiple places (here and here) that reusing an address degrades the security of the whole network; I also think I've seen this claim elsewhere but can't track down the source anymore. I don't understand how this could degrade the security of the network, and if it does, what's to prevent an attacker from repeatedly doing this before an attack if it would help?

1 Answer 1

2

Reusing an address is a security issue if you have a weak random number generator, as was an issue with the Android Bitcoin Wallet. I should note this was android's fault for using a bad generator and was fixed quickly by the app developer, though some people lost coins because they had signed multiple messages (i.e. transactions) with the same address and the number generator used the same random number for more than one transaction, for more info you can see this: http://gigaom.com/2013/08/12/why-bitcoin-users-using-android-wallet-apps-need-to-upgrade/

If you'd like to know more about why using the same random number in two messages is bad, you can read about ECDSA (ecliptic curve digital signature algorithm) here: https://en.bitcoin.it/wiki/Protocol_specification#Signatures

Also if you are concerned with the people you transfer bitcoins with knowing how much money you have and when you're sending money, and possibly to whom, you should consider keeping your addresses and transactions separate. This involves choosing which inputs you use to send transactions, using a system like armory allows you to do this.

3
  • Do you have a source for "some people lost coins" because of the android rng bug?
    – Jannes
    Feb 19, 2014 at 13:01
  • I agree with James that it would be nice to have a source on "some people lost coins". Even with that, though, it sounds like only the people who reused an address lost coins, not even other users of the same buggy pRNG.
    – Daniel H
    Mar 11, 2014 at 5:20
  • You can look through this thread here, it talks a lot about the issue with the Android Bitcoin Wallet bitcointalk.org/index.php?topic=271486.0 . About 55 bitcoins were stolen , and it is verifiable since they come from addresses that were compromised due to bad signatures.
    – k kurokawa
    Jul 13, 2014 at 18:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.