In the BIP32, it does not define the round of HMAC-SHA256.
In http://bip32.org/, it use 50,000 rounds.
In "mastering Bitcoin", it use 2048 rounds.
Is there any explicit standard, or what we suppose to follow?
Book "Mastering Bitcoin":
Add a comment
|
BIP 32 only uses one round of HMAC-SHA512 to go from the seed to the master private key.
Neither of the two sources you listed are going from a seed (or passphrase) to the master private key. They are going from a mnemonic or passphrase to the seed.
What Mastering Bitcoin is describing is the BIP 39 conversion from mnemonic to BIP 32 seed. From there, that seed will be put though HMAC-SHA512 one more time to get the final master private key.
bip32.org is using HMAC-SHA256 (which is not HMAC-SHA512) 50,000 times in order to convert the passphrase you enter into a BIP 32 seed. Again, the resulting value will be hashed one more time using HMAC-SHA512 to get the master private key.
answered Jan 19 '19 at 17:18
-
it that means the seed (pri and pub) will be different if the procedure is a little bit different if we use a different wallet? – Carpemer Jan 20 '19 at 0:28
-
The seed is just an integer, it is not a private-public keypair. Given two different wallets, it is possible that they go from mnemonic or passphrase to seed differently, which means that the resulting seed is different. However, if the seeds are the same, then the master private key will be the same. Also BIP 39 specifies a standard way to get the seed from a mnemonic, so wallets that use that will get the same seed and thus master private key from the same mnemonic. – Andrew Chow♦ Jan 20 '19 at 2:24
-
Thanks for the clarification, but just feel bad if we still can not align the procedure to recover the right address from mnemonic in the cryptocurrency industry. – Carpemer Jan 20 '19 at 2:43
-
There is no one correct way to do it. There are an infinite number of ways to go from mnemonic to seed. All people can do is to specify and standardize one way to do it. That's what BIP 39 does, and AFAIK, most wallets that people actually use that have mnemonics, do it that way. – Andrew Chow♦ Jan 20 '19 at 6:02
