Exploring the Idea of a Brain Master Key

8 replies 320 views
0xGangMember
Posts: 12 · Reputation: 222
#1Apr 1, 2021, 12:23 AM
I’ve been looking around and can't find any way to generate a master key from a password. You know like those brain wallets that create private keys from a password. Isn’t it odd that there are no brain master private key generators? Is there something I’m missing?
6 Reply Quote Share
0xChadNewbie
Posts: 138 · Reputation: 3
#2Apr 1, 2021, 01:49 AM
It could be super simple. Just use SHA512 instead of SHA256 to get the right size for a master private key. You could turn that 512-bit result into an xprv key. But yeah, it’s just as insecure as brain wallets. Like you said, why create an HD version of something already proven to be insecure?
0 Reply Quote Share
mr_apeNewbie
Posts: 139 · Reputation: 35
#3Apr 1, 2021, 03:22 AM
Real devs focus on building better things from good ideas. Look at BIP-32, a solid proposal for key generation, then they added BIP-39 to make it even better. They keep improving with BIP-43, BIP-44 and so on. Nobody wants to build on a shaky concept like brain wallets.
3 Reply Quote Share
0xGangMember
Posts: 12 · Reputation: 222
#4Apr 1, 2021, 05:31 AM
Brain wallets were meant to be cold storage, which kinda helps with security since they don’t sign transactions. But still, they’re insecure. HD wallets are better for maintaining privacy even when signing transactions.
3 Reply Quote Share
gang2015Member
Posts: 215 · Reputation: 62
#5Apr 1, 2021, 07:25 AM
By the way, warpwallet is trying to tackle some security issues by using salt and scrypt instead of SHA-256, with tons of rounds for extra protection.
4 Reply Quote Share
orbit1337Senior Member
Posts: 113 · Reputation: 941
#6Apr 1, 2021, 08:25 AM
I actually built my own setup as an experiment a while back. I can generate endless private keys from it. I even got access to my Bitcoins in that brain wallet I made! But honestly, I wouldn’t use it for anything serious.
3 Reply Quote Share
0xChadNewbie
Posts: 138 · Reputation: 3
#7Apr 1, 2021, 02:27 PM
So you’re talking about signing stuff, huh? Is that about future-proofing against quantum computing? True, if it’s not used to spend, but the main issue is still the weak 'human entropy'. Even long brain wallets can fall to brute force.
5 Reply Quote Share
0xGangMember
Posts: 12 · Reputation: 222
#8Apr 1, 2021, 04:40 PM
Didn’t think about QC. I was more worried about classic attacks and yeah, I get it, low entropy is the real problem. The thing is, brain wallets don’t keep your privacy safe since they use one address for all UTXOs. Better to use a BrainHDWallet.
3 Reply Quote Share
Posts: 25 · Reputation: 179
#9Apr 1, 2021, 05:01 PM
Brain wallets are risky, no doubt. You can play around with them if you want to see how they work, but there are secure options out there. Just go for a seed phrase and maybe a hidden wallet with a BIP39 Passphrase. Don’t just hash your readable password to make a brain wallet. Even if you hash it, it’s easy to revert back to the original password. Seriously, unless it’s for a test, don’t trust brain wallets with your funds.
4 Reply Quote Share

Related topics