Questions tagged [bip-32-hd-wallets]

BIP32, or Hierarchical Deterministic Wallets. https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki

Filter by
Sorted by
Tagged with
32
votes
1answer
4k views

ELI5: What's the difference between a child-key and a hardened child-key in BIP32

I've read BIP32, and I do understand it more or less. Could someone please explain to me like I'm 5 years old what the difference between a child-key and a hardened child-key is? I'm trying to add ...
18
votes
2answers
2k views

What is the status of hierarchical deterministic wallets (BIP32)

BIP32 specifies hierarchical deterministic wallets, where a master seed fully determines a whole tree of keypairs that can be arbitrarily branched. It also introduces the notions of internal and ...
10
votes
2answers
3k views

Best Practices for hardened keys in HD wallets?

Essentially, I am seeking to know where in an HD wallet tree structure should hardened keys be used. For example: Shouldn't all child keys of the master extended key be hardened? Should all extended ...
9
votes
3answers
6k views

What BIP32 derivation path does Electrum use?

Electrum 2.0 and up uses BIP0032 internally. I want to write code that generates the same addresses. I can't find any information about this online. What BIP32 paths does it use to generate addresses?...
9
votes
1answer
4k views

Is the Electrum seed compatible with other wallets?

Apologies if this is a simple question - a newbie here! I'm trying to understand backups. If I use Electrum to make a back up (including the 12 word seed password), will I then need to use Electrum to ...
8
votes
2answers
5k views

Pros/Cons/Limitations of Mnemonic Phrases - BIP39

BIP39 mnemonic phrases replace considerations about how to store one private key, with considerations about how to store the seed to a series of private keys. The idea is that the private keys are ...
8
votes
2answers
1k views

Retrieving all the funds from BIP32 derived wallets

An ecommerce site is using BIP32 wallets for receiving order payments from a tree of child keys where each leaf node is unique to one purchase transaction. Is it common for the site to immediately ...
6
votes
3answers
1k views

What BIP32 derivation path does Electrum use for Multisig?

Same question as What BIP32 derivation path does Electrum use? but for multisig. thanks.
6
votes
1answer
2k views

Recovering a HD wallet from a partial seed phrase

I am attempting to help recover a wallet where the owner only wrote down 11 of the 12 words in the seed phrase. Initially, I thought the task would be a quick and well-defined, but it appears to be a ...
6
votes
1answer
567 views

If a single private key of the HD bitcoin account is compromised, is the whole HD account compromised?

The subject pretty much asks it all. I asked the same question on the Mycelium web site but did not get an answer. An HD account can have multiple private keys. Suppose one of the previous private ...
6
votes
1answer
1k views

Why does BIP44 use non-hardened paths at all?

BIP44 uses hardening/private derivation on most levels: m / purpose' / coin_type' / account' / change / address_index but not on the change and address_index level. First of all, what does hardening ...
6
votes
4answers
3k views

HD wallets and address reuse

HD wallets create a series of addresses, and then when one address has received an input it will give you a new address that hasn't received inputs yet So in the idea of you sending yourself bitcoin ...
5
votes
3answers
5k views

How do I view the extended public key in Electrum?

Someone's asking for my extended public key. How do I view this? What are the consequences of giving this to someone? Can they steal my Bitcoins if I give this to someone?
5
votes
2answers
553 views

BIP32 recommends a 256 bit seed. Why do most Bitcoin wallets only use a 128 bit seed?

According to BIP32's "Master key generation" section, "256 bits is advised". See https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#Master_key_generation Why did BIP32 consider 256 bits ...
5
votes
1answer
1k views

Determining xprv from xpub and child private key

I'm confused by the wording in BIP0032: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it ...
5
votes
1answer
623 views

BIP32 wallet sync with Bloom filters

I'm working on my SPV library and I still have a hard time figuring how to approach the BIP32 + Bloom filters combination. Here's how I currently sync an existing HD wallet (after fast catch-up): ...
5
votes
3answers
711 views

Is it possible to check if a bitcoin address “belongs to” a master public key from a deterministic wallet?

Let's say I have a Master Public Key (MPK) and have a derived some addresses from it. How can I check later if a given address was derived from my MPK?
5
votes
1answer
385 views

Sharing BIP32 extended master public key

I have User A who generates BIP32 Master Public and Private Keys. They share the Master Public Key with User B. Using the Master Public Key User B generates Address of A and sends bitcoins from ...
4
votes
2answers
2k views

How to use NBitcoin for BIP32 wallets

I'm using c# NBitcoin to generate master key at an offline server ExtKey privateKey = new ExtKey("[My seed]"); ExtPubKey pubKey = privateKey.Neuter(); I will need to give the online server the ...
4
votes
3answers
2k views

How can I watch all addresses under HD wallet?

Is there any way to watch all addresses under HD wallet? I'd like to notify users when any of addresses in a HD wallet receive BTC. It looks like bitcoind (walletnotify) doesn't support HD wallet. ...
4
votes
3answers
6k views

How to import a HD wallet from an extended private key

I'd like to export a derived private key from my Electrum HD wallet, and use it as a HD wallet master key in a Mycelium wallet. I used bx to get the key like this (m/2'/0) (where m is the unencrypted ...
4
votes
3answers
2k views

is there a tool to produce addresses given a master public key?

I have master public key of my wallet and I want to generate addresses but without using my current wallet. Is there a tool that does that?
4
votes
1answer
687 views

How Do HD Wallets Keep Track of all accounts?

If a HD Wallet generates 1,000 accounts for example. How would they keep track of all of the account's balances, if someone for example, paid into the 455th account, they would want to update the ...
4
votes
6answers
4k views

Is there any service/api for deriving HD wallet addresses from a master public key?

I need this for a tool i'm writing that generates a transaction history report. think: accounting, auditing, etc. The tool does not and should not have access to the private keys. Ideally, the ...
4
votes
2answers
2k views

I want to generate a BIP32 version number for Namecoin and other altcoins

I want to make a BIP32 wallet for Namecoin and other alt coins. I just need to figure out how to generate a a public and private version number so that the BIP32 extended key prefix is something that ...
4
votes
1answer
529 views

In HD Wallet recovery how does the wallets know which addresses to recover

I have been reading the BIP32 proposal explaining how HD works but it didn't mention on any point how one wallet in one phone can recover from a simple mnemonic seed. Does it just try all possible ...
4
votes
1answer
80 views

Hardened Keys vs Normal Keys - A Simpler Explanation

I'm trying to better understand hardened keys and normal keys and how the former protects the rest of and HD wallet. Following on from the answer provided here: ELI5: What's the difference ...
4
votes
3answers
947 views

How can I recover bitcoins sent to derived addresses in Electrum?

I am using the Electrum wallet. Recently, I used my Public master key on the Mycelium Gear site to create a widget. This widget generates Bitcoin addresses, which I want to manage with my Electrum ...
4
votes
3answers
668 views

What current wallets support deterministic public addresses (BIP32)?

Just curious how many complete implementations of the bip32 standard exist.
4
votes
1answer
2k views

How to recover coins from a wallet that uses BIP32 Deterministic Keys?

Say I am using an online wallet that uses BIP32 deterministic keys and the site goes down. I have a backup of my seed (passphrase). Is there a github repo that I can download, run on an offline ...
4
votes
1answer
150 views

How can I prove control of HD wallet through message signing?

If I sign a message with one of the address from an HD wallet, does that prove control over the rest of the addresses created and will be created inside that HD wallet?
4
votes
1answer
765 views

replicating in python what the electrum wallet does during (deterministic) wallet creation

I am trying to replicate in python what the Electrum wallet does during (deterministic) wallet creation. IMHO the docs are a bit sparse on this one bit maybe because its only performed once for most ...
4
votes
1answer
1k views

Creating a Deterministic Keychain from BIP32 master public key

I'm trying to create a bitcoinj determinstic key chain from a BIP32 master public key. This is the code that I have written so far: val xpub = "...
4
votes
1answer
626 views

Clarification of BIP32 hierarchical deterministic multisig scripts

As everyone is aware, I'm a huge proponent of Vitalik Buterin's pybitcointools Python 2.7/3.x library. I am having a some trouble understanding the BIP32 concepts, which are coded in the deterministic/...
4
votes
2answers
224 views

Remove address from sequence in HD wallet

Is there a way to eject an address out of the sequence of an HD wallet? Lets say an address was used for a political donation to a regime in Namibia that may get international condemnation a few ...
4
votes
1answer
169 views

How do I get a vanity address from a hierarchal deterministic wallet?

I'm interested in finding different techniques that can be used to create vanity addresses with a BIP32 address. For example, can any of this computation be offloaded to a dedicated server, or a 3rd ...
3
votes
4answers
2k views

Electrum 2.0: non-BIP39/32 standardisation complicates matters immensely. Why?

Electrum 2.0 has been causing me some frustration, insofar as it seems to be a non-standard implementation of BIP32/BIP39 (HD wallets, mnemonic seed, respectively). The wallet in question is a 2of2 ...
3
votes
4answers
4k views

How to get Mutlibit Hd private keys from mnemonic

I'm trying to use this tool: https://dcpos.github.io/bip39/ but none of the addresses match. I would really appreciate some help.
3
votes
3answers
528 views

A Wallet for many blockchains (not just the bitcoin blockchain)

In terms of the future of the trust network where there will be an increasing number of fit-for-purpose blockchains such as ones for proof of asset, proof of identity, proof of ownership etc., will ...
3
votes
1answer
705 views

Do electrum fully support Hierarchical Deterministic Wallets?

I'm curious if electrum fully support Hierarchical Deterministic Wallets (BIP32). I have seen in source code that some part of implementation is done. But there are also as I think some electrum ...
3
votes
1answer
126 views

A couple of questions on Schnorr sig

In the BIP by Pieter Wuille it is told that the key prefixed version of Schnorr signature is needed when the scheme is used in combination with BIP32's unhardened derivation. Could someone provide an ...
3
votes
1answer
345 views

Couldn't an attacker cause online (watch-only) wallets to display malicious receiving addresses?

If I understand correctly, one of the main perks of using a deterministic watch-only wallet is the ability to generate new receiving addresses without syncing with the offline wallet, but this seems ...
3
votes
1answer
59 views

Linking Bitcoin addresses based on a private key - is that possible

I have seen a claim as follows: [We] apply algorithms to detect which bitcoin addresses are sharing the same private keys. In most cases, this leads to a high-level assertion of certain addresses ...
3
votes
1answer
236 views

can parent private key sign a transaction created by a child address?

like this: I have a private key P, and via a HDchain, it creates a child address addrChild with a child key pair: priKeyChild and pubKeyChild. When I create a rawTransaction with the addrChild, I ...
3
votes
1answer
819 views

BIP 32 seed resulting in an invalid private key

everyone. For my final year project, I'm developing some Bitcoin/Bitcoin related technologies (BIP32, BIP 38, BIP39, Bas58Check encoding/decoding, etc) in pure Node.js (using only native libraries, ...
3
votes
1answer
131 views

Deterministic keys with one-way operation

BIP 0032 "Security Implications" states One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it ...
3
votes
2answers
649 views

Recovering wallet using BIP32/wordlist/.priv file

I was using Msigna but it's having issues connecting to the localhost (Running updated bitcoinqt). I sent coins to my old account without waiting for sync (noob move) but now I'm unable to access the ...
3
votes
1answer
1k views

Why one would need *extended* public keys for auditing a bip32 wallet?

(I am reading the bip32 for an altcoin development.) In the bip32 specification, it is written that listing all incoming and outgoing payments of a hierarchical deterministic wallet would required ...
3
votes
0answers
159 views

Python library for Multisignature HD wallets

Is there is any python library is available that allow creation of Multisignature HD wallets ?
3
votes
0answers
387 views

Electrum Seed Purpose for MultiSig Wallet

I'm curious as to what exactly is protected by the seed that Electrum generates for a multisig wallet. My knowledge of the protocol implementation is rather basic, so please correct me where I'm wrong ...