Bitcoin Stack Exchange is a question and answer site for Bitcoin crypto-currency enthusiasts. It only takes a minute to sign up.
Sign up to join this community
I've been reading about HD wallet derivation key mechanism. I understood that if an attacker gets somehow a child's private key plus the chaincode used to derive that child' key, then he could calculate the parent's private key. How could that be possible? Through a sort of brute force attack?
Furthermore, how can the hardened derivation scheme neutralize this problem by using the parent's private key instead of his public key as input for the HMAC-SHA512 functions?
Here is a solid answer by Andrew Chow. Can we derive parent’s private key using child’s private key?
As for the specific questions:
How could that be possible?
Once again, Andrew Chow: Derivation of parent private key from non-hardened child
Furthermore, how can the hardened derivation scheme neutralize this problem by using the parent's private key instead of his public key as input for the HMAC-SHA512 functions?
(From the linked post above) Hardened derivation protects against this because it generates the child private key by hashing the parent private key. However this also means that you cannot generate the child public key from the parent public key.
