Questions tagged [deterministic-wallets]

Collects questions about deterministic wallets i.e. wallets that derive all private keys in a predictable way from a seed. Deterministic wallets have better backup properties than unrelated random private keys.

Filter by
Sorted by
Tagged with
0
votes
2answers
147 views

Trying to understand parent fingerprint in HD wallets

I'm trying to implement a barebones HD wallet generator in C#. I'm starting with a mnemonic and derivation path m/0' and want to generate BIP141 p2wpkh-in-p2sh addresses. Obviously for the Master ...
0
votes
1answer
41 views

Deterministic - BIP32 Derivation Gap Limit

I'm creating many derived addresses from a xprv (HD private key). I've been reading about the gap limit problem. The gap limit is 20 addresses ahead. How do I get my wallet to detect funds, in ...
0
votes
1answer
22 views

Hierarchical Deterministic (HD) Importing Funds

I'm creating derived addresses from a HD private key. I have all data saved, such as the; seed, HD private key and derived addresses with their private keys, plus wif formats. I'm receiving funds in ...
0
votes
1answer
63 views

funds in hd wallet

I have a doubt on HD wallets, I have generated a sequence of address. how to check the balance of each address or how we can look for balance. Did the amount move to the base address as like monero ...
0
votes
1answer
21 views

wallet that does not abstract change addresses?

I wanted a hands on approach to see change adresses myself instead of hiding away all the details. I also want to see non-deterministic wallets just for education so that I can understand. When we ...
0
votes
1answer
46 views

Is auditing a BIP32 tree only possible if it is non-hardened?

BIP 32 allows you to to implement the auditor use case: Audits: N(m/*) In case an auditor needs full access to the list of incoming and outgoing payments, one can share all account public ...
0
votes
1answer
216 views

Bitcoinjs-lib help with deterministc wallet

i'm learning about bitcoin, and bitcoinjs-lib (https://github.com/bitcoinjs/bitcoinjs-lib) I created a dummy wallet on coinomi using this mnemonic ('eight better wealth display father cave suffer ...
5
votes
2answers
548 views

BIP32 recommends a 256 bit seed. Why do most Bitcoin wallets only use a 128 bit seed?

According to BIP32's "Master key generation" section, "256 bits is advised". See https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#Master_key_generation Why did BIP32 consider 256 bits ...
2
votes
1answer
2k views

How do HD wallets use mnemonic to recover all private keys?

As I understand, a wallet like BRD wallet can have many private keys and receiving addresses. When I give them the mnemonic, how do they re-generate all of the relevant private keys from that ...
1
vote
1answer
205 views

What is the meaning and application of the apostrophes in derivation paths of BIP32 / BIP44?

Can we please clarify if there is any difference (because apparently some technical documentation explicitly requests to include apostrophes) between a derivation from extended private key (xprv) or ...
0
votes
1answer
91 views

Bitcoin Address Workflow on Spend Leftovers

I need to understand the correct Bitcoin address workflow for transactions. I created an address a while back with a common wallet and sent some coin there. The address is at segwit m/49'/0'/0'/0/0. I ...
1
vote
1answer
413 views

NBitcoin and Mnemonic Standards

I am very new to Bitcoin development so forgive me... I'm using NBitcoin in a .Net console app to generate a master key using a mnemonic and then derive hierarchical keys. Here is the code I am using:...
2
votes
1answer
294 views

Understanding a Wallet Restore

This is my first post on block chain related programming so please excuse my ignorance. I find the terminology in the BIP32 and BIP39 specs hard to understand so I'm trying to confirm my understanding ...
5
votes
1answer
1k views

Determining xprv from xpub and child private key

I'm confused by the wording in BIP0032: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it ...
2
votes
2answers
709 views

How to list all addresses in a deterministic wallet?

Deterministic wallets generate a key space following established standards, using a random passphrase as seed. I have a couple of questions: How many keys can be generated by a deterministic wallet? ...
5
votes
1answer
2k views

Derivation of parent private key from non-hardened child

Quote from BIP 32: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it is equivalent to knowing ...
9
votes
1answer
4k views

Is the Electrum seed compatible with other wallets?

Apologies if this is a simple question - a newbie here! I'm trying to understand backups. If I use Electrum to make a back up (including the 12 word seed password), will I then need to use Electrum to ...
5
votes
1answer
997 views

How do hierarchical deterministic wallets work transaction-wise?

As far as I know (and as explained here) hierarchical deterministic wallets keep a master key pair (private and public). When using them the public key is newly generated in every transaction. I ...
5
votes
3answers
708 views

Is it possible to check if a bitcoin address “belongs to” a master public key from a deterministic wallet?

Let's say I have a Master Public Key (MPK) and have a derived some addresses from it. How can I check later if a given address was derived from my MPK?
7
votes
1answer
732 views

How does the client know the number of keys and coins when recovering from a seed?

When I have a seed and use it to recover my keys, how does a client find out which keys I had and their respective amounts? To clarify, I understand how a deterministic key works and that we can ...
7
votes
2answers
8k views

Electrum: “restoring” a wallet from a seed

Suppose I set up a wallet with a deterministic seed passphrase. I then use it, moving bitcoins around, sending some change to change addresses. Electrum will apparently create more addresses when ...
0
votes
1answer
46 views

Deterministic wallet audit ability

Deterministic wallet described in BIP 32 has an auditing functionality by sharing the public parent key. https://bitcoin.org/en/developer-guide#hierarchical-deterministic-key-creation But if I use ...
1
vote
1answer
60 views

For deterministic wallets, which key is better to give out?

I am just finding out about deterministic wallets. I have read here that it is possible to derive the private key if one happens to have given out both master public key AND a child private key. So ...
2
votes
1answer
1k views

Do I need to secure my Master Public Key generated from an Electrum wallet?

I have an electrum wallet and have exported the Master Public Key. What level of security should I use for the MPK? Should I keep it offline? Can I keep it in plaintext in an online computer? Back ...
1
vote
1answer
204 views

If an offline, never connected, Electrum wallet is lost, it can still be recovered?

I'm just making sure I understand this correctly, since I'm new to Bitcoin. Lets say there is an Electrum wallet created, but on a machine which was never connected to the internet. This machine is ...
1
vote
1answer
538 views

What is the “hierarchical” about in Hierarchical Deterministic Wallets?

So, the advantage of deterministic wallets is that you can recreate all private keys from the initial backup you created. What's the advantage of having a hierarchy branching out from the master seed,...
2
votes
2answers
685 views

Deterministic wallet and address generation

I have a ledger nano hd wallet and I actively used the Google Chrome plugin to receive some transactions. After that I linked the HD wallet to my mycelium tablet app. If I receive more transactions ...
1
vote
0answers
133 views

BitcoinJ - Master Key from 12 word

Is there any posibilities to: 1. Create deterministic seed from 12 or 24 word 2. Create Private Master key from this deterministic seed 3. Create deterministic wallet using private master key in ...
5
votes
2answers
993 views

How to recover a deterministic wallet offline?

I know that in the case of electrum there is a gap limit and it will keep generating addresses until it finds a number of consecutive empty addresses equal to the gap limit. What about if I want to ...
6
votes
2answers
1k views

HD / Deterministic Wallets and public key

I understand the basic concept of generating an unlimited number of public key addresses from a master public key. What I won't understand is how to get the wallet balance. Do I have to query unspent ...
2
votes
2answers
116 views

How would an Auditor (“m”) of BIP32 audit the keys generated by the master?

Suppose an auditor needs to review all the incoming Tx for a given wallet... or many wallets. What are the logical steps the Auditor needs to do? Do they need to pre-generate a list of all possible ...
5
votes
1answer
469 views

Derive new public keys from a public key?

This article says you can generate new public keys from an already generated public key. How is this possible? https://bitcoinmagazine.com/articles/deterministic-wallets-advantages-flaw-1385450276 ...
2
votes
1answer
628 views

Problems generating addresses using bip32

I'm trying to generate bip32 addresses using the following (the PHP version). https://github.com/prusnak/addrgen The author provides a test MPK which I can get working that looks like this: ...
4
votes
1answer
72 views

Is mainline Bitcoin planning on switching to deterministic wallets?

Deterministic wallets enable reliable backups but the mainline client doesn't use them. I was told that bitcoind and Bitcoin-QT are planning on switching to deterministic wallets by default, is this ...
8
votes
1answer
970 views

How do deterministic wallets know how many keys to generate?

Say I backup the "seed/key" for a deterministic wallet. I then create 10,000 transactions, resulting in 10,000 new addresses being generated. Say I then lose the wallet file and I restore from the "...
4
votes
1answer
2k views

How to recover coins from a wallet that uses BIP32 Deterministic Keys?

Say I am using an online wallet that uses BIP32 deterministic keys and the site goes down. I have a backup of my seed (passphrase). Is there a github repo that I can download, run on an offline ...
3
votes
1answer
181 views

If I import/restore a deterministic wallet into Bitcoin Armory, how far into the dynamic addresses does it look for transactions?

I see that in Armory, I can click on "receive bitcoins" any number of times, and it generates a new as-yet unused address every time. So I could potentially send coins to address 1000, and have 999 ...
0
votes
0answers
259 views

Deterministic Key Generation: prove that address is in a sequence of your original seed

Lets say that someone wanted to prove they owned some metadata without revealing who they were. For instance, lets say they needed to prove they had owned a contract but that contract was in an ...
2
votes
1answer
141 views

Where to stop key derivation when looking at balance of a deterministic wallet

If I want to know the total balance in all the addresses which can be generated in a deterministic wallet (like electrum or armory). I have the master public key allowing me to derive an infinite ...
3
votes
1answer
387 views

Deterministic Wallet Step By Step

I'm reading about deterministic wallets, I get the point, but it get's confusing when you actually start setting up things. I have to install support for generating "whatever"-coin addresses on a ...
3
votes
1answer
1k views

How do you safely set up a offline deterministic wallet?

There is a good tutorial for setting up a safe offline wallet with a regular bitcoin wallet here. If I want to set up a safe deterministic offline wallet (i.e. Electrum). What would be the right ...
2
votes
1answer
344 views

ECIES - When is it bad to sign and encrypt using the same keys?

Suppose I have a public key for a particular user (perhaps extracted when using the new public key recovery format included in P2SH, and BIP32 transactions). Is it OK the same key for both signing ...
3
votes
1answer
345 views

Couldn't an attacker cause online (watch-only) wallets to display malicious receiving addresses?

If I understand correctly, one of the main perks of using a deterministic watch-only wallet is the ability to generate new receiving addresses without syncing with the offline wallet, but this seems ...
6
votes
1answer
240 views

How secure are current deterministic wallets?

Can someone explain how secure the deterministic wallet implementations of Electrum and Armory are? As far as I know, Electrum uses a 128-bit seed to generate all the addresses. I don't get this ...
8
votes
3answers
2k views

At what point is a new wallet known by the Bitcoin network?

I was just showing a deterministic wallet to a friend who asked "At what point is the wallet known to the network?" and I could only guess by saying that it is known only when a transaction is ...