0

Suppose you've created a random private key by rolling dices.
You've checked in the blockchain and nobody else has ever used the respective address of such private key.

Issue
Is this process reasonably safe to generate private keys?
Or, is there a subset of private keys that you should avoid due to known vulnerabilities in Bitcoin ECDSA (ie: something faster than brute force)?

|improve this question
3

Any 256-bit number between 0x1 and 0xFFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFE BAAE DCE6 AF48 A03B BFD2 5E8C D036 4141 is a valid private key. Assuming your random number is in that range (and it's extremely likely that is the case), it should be just as fine of a private key as any other number. In fact, you shouldn't even bother with checking if the address is already known because:

  1. Probability tells us it isn't used
  2. Its existence on a chain explorer is not proof that nobody else has generated that key
  3. By checking, you may be telegraphing that you own that key

Be more concerned about how your key is generated, rather than is a particular number is vulnerable to some unknown attack. Make sure your dice rolls are done in such a way that every byte is just as likely as every other byte. I've used a D8 in conjunction with a coin flip in order to generate 4 bits at a time. If the coin is heads, I use the D8 at face value. If tails, I add 8. I count 16 (tails + 8) as 0. If you work it out, you'll see that this generates a perfectly random number between 0 and 15, or one hexit. Do this 64 times, and you have a 256-bit key.

|improve this answer
  • > "[...] you shouldn't even bother with checking if the address is already known" I prefer being more cautious with that. If possible, I would also check against possible brainwallets ... – Mark Messa Jan 10 '18 at 4:40
  • 1
    Suit yourself, but math says it's a waste of time, and logic says it doesn't give you an answer anyways. Anyone can generate a key that hasn't had its corresponding address broadcast. Also, your privacy has now been compromised. If someone checks an address that hadn't been seen on the network, it's pretty easy to associate an IP address with that address now. – Jestin Jan 10 '18 at 4:50
  • "math says it's a waste of time" Ok, I agree the chances are almost zero. However, since it is so easy to make such check, I think it is worthwhile. If any collision happens, it is an indicator that your random generator is biased and needs to be scrutinized. – Mark Messa Jan 11 '18 at 5:11
  • "your privacy has now been compromised." Your privacy will be compromised anyway as soon as you receive funds from an exchange. – Mark Messa Jan 11 '18 at 5:13
  • Nobody said anything about an exchange. Fiat has nothing to do with this. You were asking about generating numbers. I just want to make sure people understand that checking has privacy consequences. Also, it is literally more likely that an asteroid will kill us all by the time you finish reading this sentence than it is to have a key collison when using a good RNG (such as dice). If you think it's worth checking, then I'm confused why you're concerned with money more than the imminent death of our species. Seems weird. – Jestin Jan 11 '18 at 5:28

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.