I understand that unhardened extended public child keys may be derived from any unhardened extended public key without access to any private keys.

Is the reverse also true -- can a parent extended public key be derived from a child extended public key?


Is the reverse also true -- can a parent extended public key be derived from a child extended public key?

No. BIP 32 uses hash functions in order to derive the child keys. In order to be able to derive the parent key from the child key, you should need to be able to reverse the hash function, which is currently impossible (I say currently because some vulnerability could be discovered which allows it to be reversed, but that is unlikely to happen).

Furthermore, the child key derivation also involves calculating a public key from a private key (that private key is basically temporary and doesn't actually reveal anything about the child private key). You would need to reverse that too, but doing so is also currently impossible (it is theoretically possible with a quantum computer).

| improve this answer | |
  • Thanks for this. I don't understand then how is it that an unhardened pub key + any child private key could compromise the entire tree all the way back to root -- wouldn't the ability to derive a parent pub key from its child be needed? – Magnus Feb 21 '18 at 15:46
  • 1
    The issue is when you have the parent pub key and any child private key. That lets you derive the parent private key. – Andrew Chow Feb 21 '18 at 15:57
  • Ah OK. But still now that you have a parent pub key and have derived the parent priv key, is that enough to then break into the grandparent layer, ie the parents of the parents? In other words, can a parent key be derived from a child pub + child priv? What I'm hearing described here is more of a sibling derivation at the same level. – Magnus Feb 21 '18 at 16:04
  • 1
    No, the parent key cannot be derived using only child keys. But once you get the parent private key, you can derive all child keys, and, from there, any descendants of those child keys. – Andrew Chow Feb 21 '18 at 16:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.