summaryrefslogtreecommitdiff
path: root/c0
diff options
context:
space:
mode:
authorJochen Hoenicke <hoenicke@gmail.com>2016-07-27 10:39:36 +0000
committerbitcoindev <bitcoindev@gnusha.org>2016-07-27 10:39:48 +0000
commit8db2d4744ce29d14c61e5f3508bcd60d2d41cbae (patch)
tree2de83987bfb773bc25439520f59ad3c1ac338e16 /c0
parent13e3cae085dccd524f49e5a3056ad58370c0fc59 (diff)
downloadpi-bitcoindev-8db2d4744ce29d14c61e5f3508bcd60d2d41cbae.tar.gz
pi-bitcoindev-8db2d4744ce29d14c61e5f3508bcd60d2d41cbae.zip
Re: [bitcoin-dev] BIP proposal: derived mnemonics
Diffstat (limited to 'c0')
-rw-r--r--c0/9609edbc79a777dd42195d24411465b17f8b16120
1 files changed, 120 insertions, 0 deletions
diff --git a/c0/9609edbc79a777dd42195d24411465b17f8b16 b/c0/9609edbc79a777dd42195d24411465b17f8b16
new file mode 100644
index 000000000..a4d5aa5ec
--- /dev/null
+++ b/c0/9609edbc79a777dd42195d24411465b17f8b16
@@ -0,0 +1,120 @@
+Return-Path: <hoenicke@gmail.com>
+Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org
+ [172.17.192.35])
+ by mail.linuxfoundation.org (Postfix) with ESMTPS id 3D2008D7
+ for <bitcoin-dev@lists.linuxfoundation.org>;
+ Wed, 27 Jul 2016 10:39:48 +0000 (UTC)
+X-Greylist: whitelisted by SQLgrey-1.7.6
+Received: from mail-wm0-f43.google.com (mail-wm0-f43.google.com [74.125.82.43])
+ by smtp1.linuxfoundation.org (Postfix) with ESMTPS id A069716F
+ for <bitcoin-dev@lists.linuxfoundation.org>;
+ Wed, 27 Jul 2016 10:39:47 +0000 (UTC)
+Received: by mail-wm0-f43.google.com with SMTP id q128so206871295wma.1
+ for <bitcoin-dev@lists.linuxfoundation.org>;
+ Wed, 27 Jul 2016 03:39:47 -0700 (PDT)
+DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
+ h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
+ bh=/zXC+SXka1qGvojD79TqHlpXb4he5d8bL/LwmvlmxTg=;
+ b=VmXROPVtsTmGNezSbLi3MK70bpk5sOFBqqX0yHvUfzIurgNfttbeet5Qb4NsxI/Jq+
+ MkisNa4vSWlysXhyWWnQ232et1MlfJmoUT3nFyHjTF0vKA4RRW7VaqI8l8lrUYx/qTV6
+ gYKwKoeDZJ3ZnclZ4sTVZ62H6UvtmU1893m8rFzNk/7Kom7pMq6KNm9R8UpgkhueDodX
+ TpWNuqAdwZoNotv64WyPUYps8eoSBcjAMwqmQ7288vzjr/0jKKzVCspa8eKAlyxAhX0T
+ y04xQkKlR1Yt7CbWQj5ptXf0/hzplMY9vyMqv2fiknKV1x4RRPdlBtkvXTF+5gDxSeje
+ 6oaA==
+X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
+ d=1e100.net; s=20130820;
+ h=x-gm-message-state:mime-version:references:in-reply-to:from:date
+ :message-id:subject:to;
+ bh=/zXC+SXka1qGvojD79TqHlpXb4he5d8bL/LwmvlmxTg=;
+ b=R8YF/mzhSpLVpXGG8aKYvncxGOrK7cNuZ/9IU51rvkLAqZEwXSjASTn122d8GXhhR5
+ lNSvHkeh0n1+B1969LGAl50t8XtGWtR+F7JPXRMhESCBygNmKYCLj/uIqpUUPG5PPyru
+ C4BCb/lqBfrwxeBah1sqKYA0cpPTCHDuL1bTrXmfCqMyGSFAFwOojz7i6rP4cFrMkls3
+ 63/kaIwiMMCrRE0AE7sHKOqKZ8qpN0VG9OUWGumhVYRNMd9iyFFD6Gpo0DeT715pY8dK
+ ThtBkeX0TPGWlIPN0OOD+dtBwkQjERTMfrE5NmzLEx9HkG82fF3p5JO4JBuvdN/d/T3F
+ fr2Q==
+X-Gm-Message-State: AEkoouujKkGOSKBbZTK2nTcYuisjgsTWKqWXOtpCo2Se8gBrOQA5yeywwA3krZGSvCp0oxvVgXwIfbhd9H9qxw==
+X-Received: by 10.194.58.112 with SMTP id p16mr27285683wjq.24.1469615986068;
+ Wed, 27 Jul 2016 03:39:46 -0700 (PDT)
+MIME-Version: 1.0
+References: <5797AC88.8030507@gmail.com> <5797C3A7.5030600@jonasschnelli.ch>
+In-Reply-To: <5797C3A7.5030600@jonasschnelli.ch>
+From: Jochen Hoenicke <hoenicke@gmail.com>
+Date: Wed, 27 Jul 2016 10:39:36 +0000
+Message-ID: <CANYHNmLot1+-LbisfrPRtgDPnofD7bnQ3By_pgT2RFvLHRm7Hg@mail.gmail.com>
+To: Jonas Schnelli <dev@jonasschnelli.ch>,
+ Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
+Content-Type: multipart/alternative; boundary=047d7ba97076ce52c405389ba272
+X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
+ DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW
+ autolearn=ham version=3.3.1
+X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
+ smtp1.linux-foundation.org
+Subject: Re: [bitcoin-dev] BIP proposal: derived mnemonics
+X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
+X-Mailman-Version: 2.1.12
+Precedence: list
+List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
+List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
+ <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
+List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
+List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
+List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
+List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
+ <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
+X-List-Received-Date: Wed, 27 Jul 2016 10:39:48 -0000
+
+--047d7ba97076ce52c405389ba272
+Content-Type: text/plain; charset=UTF-8
+
+Jonas Schnelli via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org>
+schrieb am Di., 26. Juli 2016 um 22:10 Uhr:
+
+> Side-note: Bip39 does still use PBKDF2 with 2048 iterations which I
+> personally consider "not enough" to protect a serious amount of funds.
+>
+>
+But what are the alternatives? Put an expensive processor and a decent
+amount of memory in every hardware wallet to support scrypt? Use a million
+iterations and just wait 10 minutes after entering you passphrase? Or
+compute the secret key on your online computer instead?
+
+Also, how many iterations are secure? A million? Then just add two random
+lower-case letters to the end of your passphrase and you have a better
+protection with 2048 iterations. If you want to be able to use your
+passphrase with cheap hardware and be protected against a high-end computer
+with multiple GPUs that is almost a mllion times faster, then you have to
+choose a good passphrase. Or just make sure nobody steals your seed; it is
+not a brainwallet that is only protected by the passphrase after all.
+
+Regards,
+ Jochen
+
+--047d7ba97076ce52c405389ba272
+Content-Type: text/html; charset=UTF-8
+Content-Transfer-Encoding: quoted-printable
+
+<div dir=3D"ltr"><div class=3D"gmail_quote"><div dir=3D"ltr">Jonas Schnelli=
+ via bitcoin-dev &lt;<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.or=
+g">bitcoin-dev@lists.linuxfoundation.org</a>&gt; schrieb am Di., 26. Juli 2=
+016 um 22:10=C2=A0Uhr:<br></div><blockquote class=3D"gmail_quote" style=3D"=
+margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Side-note: B=
+ip39 does still use PBKDF2 with 2048 iterations which I<br>
+personally consider &quot;not enough&quot; to protect a serious amount of f=
+unds.<br><br></blockquote><div><br></div><div><span style=3D"line-height:1.=
+5">But what are the alternatives?=C2=A0 Put an expensive processor and a de=
+cent amount of memory in every hardware wallet to support scrypt?=C2=A0 Use=
+ a million iterations and just wait 10 minutes after entering you passphras=
+e?=C2=A0 Or compute the secret key on your online computer instead?</span><=
+br></div><div><br></div><div><div>Also, how many iterations are secure?=C2=
+=A0 A million?=C2=A0 Then just add two random lower-case letters to the end=
+ of your passphrase and you have a better protection with 2048 iterations.=
+=C2=A0<span style=3D"line-height:1.5">If you want to be able to use your pa=
+ssphrase with cheap hardware and be protected against a high-end computer w=
+ith multiple GPUs that is almost a mllion times faster, then you have to ch=
+oose a good passphrase.=C2=A0 Or just make sure nobody steals your seed; it=
+ is not a brainwallet that is only protected by the passphrase after all.</=
+span></div></div><div><br></div><div>Regards,</div><div>=C2=A0 Jochen</div>=
+<div><br></div></div></div>
+
+--047d7ba97076ce52c405389ba272--
+