Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of gmail.com
	designates 209.85.192.51 as permitted sender)
	client-ip=209.85.192.51; envelope-from=kinoshitajona@gmail.com;
	helo=mail-qg0-f51.google.com; 
MIME-Version: 1.0
In-Reply-To: <CACvEmnEdBntkXwy=zp0Cc+pjf3u+W1V_Drio01SZRG6ETkf5kg@mail.gmail.com>
References: <CACvEmnEdBntkXwy=zp0Cc+pjf3u+W1V_Drio01SZRG6ETkf5kg@mail.gmail.com>
Date: Mon, 23 Feb 2015 14:00:44 +0900
Message-ID: <CACvEmnEnibF05S0BEsatzM81KFOTvYqvT0pNLcfjaTZ4PAJw3w@mail.gmail.com>
From: =?UTF-8?B?5pyo44OO5LiL44GY44KH44Gq?= <kinoshitajona@gmail.com>
To: Bitcoin Dev Mailing List <bitcoin-development@lists.sourceforge.net>
Content-Type: multipart/alternative; boundary=001a113d36e4e36eb8050fba485d
Subject: Re: [Bitcoin-development] Request for a new BIP number (and
	discussion): Improved HD wallet generation.
Precedence: list

--001a113d36e4e36eb8050fba485d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello All,

I have updated the algorithm to include b in the derivation of a and vice
versa.

In the comment section of the gist, jhoenicke kindly pointed out that a
derivation was not including b at all, so colluding derivation was weak to
1 leaked descendant private node.

I am on my phone, but once I get home I will write out how to compromise
the parent private node with two child private nodes and the parent public
node.

Hopefully writing that out will help give an understanding of any other
hidden tricks.

Sorry if a majority don't think BIP32 is a problem, but if anyone who has
interest could comment and double check the math, I would appreciate it.

Thanks,
Jona

2015=E5=B9=B42=E6=9C=8821=E6=97=A5=E5=9C=9F=E6=9B=9C=E6=97=A5=E3=80=81=E6=
=9C=A8=E3=83=8E=E4=B8=8B=E3=81=98=E3=82=87=E3=81=AA<kinoshitajona@gmail.com=
>=E3=81=95=E3=82=93=E3=81=AF=E6=9B=B8=E3=81=8D=E3=81=BE=E3=81=97=E3=81=9F:

> Hello All,
>
> I have put together a proposal for a new generation methodology of HD
> wallets.
>
> The method is a modification of BIP32, so if something is unclear or not
> explicit, please assume it follows BIP32.
>
> I am looking forward to any and all criticism and help with writing /
> making the BIP more secure.
>
> If some of my pseudo code / English is off I apologize, I am not good wit=
h
> words.
>
> If this is deemed worthy enough to be drafted into a BIP, I would
> appreciate if someone could tell me what the overall step by step flow
> would be.
>
> Thank you, I will paste the link to the proposal below.
> Jona
>
> https://gist.github.com/dabura667/875bb2c159b219c18885
>
> --
> -----BEGIN PGP PUBLIC KEY BLOCK-----
> Comment: http://openpgpjs.org
>
> xsBNBFTmJ8oBB/9rd+7XLxZG/x/KnhkVK2WBG8ySx91fs+qQfHIK1JrakSV3
> x6x0cK3XLClASLLDomm7Od3Q/fMFzdwCEqj6z60T8wgKxsjWYSGL3mq8ucdv
> iBjC3wGauk5dQKtT7tkCFyQQbX/uMsBM4ccGBICoDmIJlwJIj7fAZVqGxGOM
> bO1RhYb4dbQA2qxYP7wSsHJ6/ZNAXyEphOj6blUzdqO0exAbCOZWWF+E/1SC
> EuKO4RmL7Imdep7uc2Qze1UpJCZx7ASHl2IZ4UD0G3Qr3pI6/jvNlaqCTa3U
> 3/YeJwEubFsd0AVy0zs809RcKKgX3W1q+hVDTeWinem9RiOG/vT+Eec/ABEB
> AAHNI2tpbm9zaGl0YSA8a2lub3NoaXRham9uYUBnbWFpbC5jb20+wsByBBAB
> CAAmBQJU5ifRBgsJCAcDAgkQRB9iZ30dlisEFQgCCgMWAgECGwMCHgEAAC6Z
> B/9otobf0ASHYdlUBeIPXdDopyjQhR2RiZGYaS0VZ5zzHYLDDMW6ZIYm5CjO
> Fc09ETLGKFxH2RcCOK2dzwz+KRU4xqOrt/l5gyd50cFE1nOhUN9+/XaPgrou
> WhyT9xLeGit7Xqhht93z2+VanTtJAG6lWbAZLIZAMGMuLX6sJDCO0GiO5zxa
> 02Q2D3kh5GL57A5+oVOna12JBRaIA5eBGKVCp3KToT/z48pxBe3WAmLo0zXr
> hEgTSzssfb2zTwtB3Ogoedj+cU2bHJvJ8upS/jMr3TcdguySmxJlGpocVC/e
> qxq12Njv+LiETOrD8atGmXCnA+nFNljBkz+l6ADl93jHzsBNBFTmJ9EBCACu
> Qq9ZnP+aLU/Rt6clAfiHfTFBsJvLKsdIKeE6qHzsU1E7A7bGQKTtLEnhCCQE
> W+OQP+sgbOWowIdH9PpwLJ3Op+NhvLlMxRvbT36LwCmBL0yD7bMqxxmmVj8n
> vlMMRSe4wDSIG19Oy7701imnHZPm/pnPlneg/Meu/UffpcDWYBbAFX8nrXPY
> vkVULcI/qTcCxW/+S9fwoXjQhWHaiJJ6y3cYOSitN31W9zgcMvLwLX3JgDxE
> flkwq/M+ZkfCYnS3GAPEt8GkVKy2eHtCJuNkGFlCAmKMX0yWzHRAkqOMN5KP
> LFbkKY2GQl13ztWp82QYJZpj5af6dmyUosurn6AZABEBAAHCwF8EGAEIABMF
> AlTmJ9QJEEQfYmd9HZYrAhsMAABKbgf/Ulu5JAk4fXgH0DtkMmdkFiKEFdkW
> 0Wkw7Vhd5eZ4NzeP9kOkD01OGweT9hqzwhfT2CNXCGxh4UnvEM1ZMFypIKdq
> 0XpLLJMrDOQO021UjAa56vHZPAVmAM01z5VzHJ7ekjgwrgMLmVkm0jWKEKaO
> n/MW7CyphG7QcZ6cJX2f6uJcekBlZRw9TNYRnojMjkutlOVhYJ3J78nc/k0p
> kcgV63GB6D7wHRF4TVe4xIBqKpbBhhN+ISwFN1z+gx3lfyRMSmiTSrGdKEQe
> XSIQKG8XZQZUDhLNkqPS+7EMV1g7+lOfT4GhLL68dUXDa1e9YxGH6zkpVECw
> Spe3vsHZr6CqFg=3D=3D
> =3D/vUJ
> -----END PGP PUBLIC KEY BLOCK-----
>


--=20
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: http://openpgpjs.org

xsBNBFTmJ8oBB/9rd+7XLxZG/x/KnhkVK2WBG8ySx91fs+qQfHIK1JrakSV3
x6x0cK3XLClASLLDomm7Od3Q/fMFzdwCEqj6z60T8wgKxsjWYSGL3mq8ucdv
iBjC3wGauk5dQKtT7tkCFyQQbX/uMsBM4ccGBICoDmIJlwJIj7fAZVqGxGOM
bO1RhYb4dbQA2qxYP7wSsHJ6/ZNAXyEphOj6blUzdqO0exAbCOZWWF+E/1SC
EuKO4RmL7Imdep7uc2Qze1UpJCZx7ASHl2IZ4UD0G3Qr3pI6/jvNlaqCTa3U
3/YeJwEubFsd0AVy0zs809RcKKgX3W1q+hVDTeWinem9RiOG/vT+Eec/ABEB
AAHNI2tpbm9zaGl0YSA8a2lub3NoaXRham9uYUBnbWFpbC5jb20+wsByBBAB
CAAmBQJU5ifRBgsJCAcDAgkQRB9iZ30dlisEFQgCCgMWAgECGwMCHgEAAC6Z
B/9otobf0ASHYdlUBeIPXdDopyjQhR2RiZGYaS0VZ5zzHYLDDMW6ZIYm5CjO
Fc09ETLGKFxH2RcCOK2dzwz+KRU4xqOrt/l5gyd50cFE1nOhUN9+/XaPgrou
WhyT9xLeGit7Xqhht93z2+VanTtJAG6lWbAZLIZAMGMuLX6sJDCO0GiO5zxa
02Q2D3kh5GL57A5+oVOna12JBRaIA5eBGKVCp3KToT/z48pxBe3WAmLo0zXr
hEgTSzssfb2zTwtB3Ogoedj+cU2bHJvJ8upS/jMr3TcdguySmxJlGpocVC/e
qxq12Njv+LiETOrD8atGmXCnA+nFNljBkz+l6ADl93jHzsBNBFTmJ9EBCACu
Qq9ZnP+aLU/Rt6clAfiHfTFBsJvLKsdIKeE6qHzsU1E7A7bGQKTtLEnhCCQE
W+OQP+sgbOWowIdH9PpwLJ3Op+NhvLlMxRvbT36LwCmBL0yD7bMqxxmmVj8n
vlMMRSe4wDSIG19Oy7701imnHZPm/pnPlneg/Meu/UffpcDWYBbAFX8nrXPY
vkVULcI/qTcCxW/+S9fwoXjQhWHaiJJ6y3cYOSitN31W9zgcMvLwLX3JgDxE
flkwq/M+ZkfCYnS3GAPEt8GkVKy2eHtCJuNkGFlCAmKMX0yWzHRAkqOMN5KP
LFbkKY2GQl13ztWp82QYJZpj5af6dmyUosurn6AZABEBAAHCwF8EGAEIABMF
AlTmJ9QJEEQfYmd9HZYrAhsMAABKbgf/Ulu5JAk4fXgH0DtkMmdkFiKEFdkW
0Wkw7Vhd5eZ4NzeP9kOkD01OGweT9hqzwhfT2CNXCGxh4UnvEM1ZMFypIKdq
0XpLLJMrDOQO021UjAa56vHZPAVmAM01z5VzHJ7ekjgwrgMLmVkm0jWKEKaO
n/MW7CyphG7QcZ6cJX2f6uJcekBlZRw9TNYRnojMjkutlOVhYJ3J78nc/k0p
kcgV63GB6D7wHRF4TVe4xIBqKpbBhhN+ISwFN1z+gx3lfyRMSmiTSrGdKEQe
XSIQKG8XZQZUDhLNkqPS+7EMV1g7+lOfT4GhLL68dUXDa1e9YxGH6zkpVECw
Spe3vsHZr6CqFg=3D=3D
=3D/vUJ
-----END PGP PUBLIC KEY BLOCK-----

--001a113d36e4e36eb8050fba485d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello All,<div><br></div><div>I have updated the algorithm to include b in =
the derivation of a and vice versa.</div><div><br></div><div>In the comment=
 section of the gist, jhoenicke kindly pointed out that a derivation was no=
t including b at all, so colluding derivation was weak to 1 leaked descenda=
nt private node.</div><div><br></div><div>I am on my phone, but once I get =
home I will write out how to compromise the parent private node with two ch=
ild private nodes and the parent public node.</div><div><br></div><div>Hope=
fully writing that out will help give an understanding of any other hidden =
tricks.</div><div><br></div><div>Sorry if a majority don&#39;t think BIP32 =
is a problem, but if anyone who has interest could comment and double check=
 the math, I would appreciate it.</div><div><br></div><div>Thanks,</div><di=
v>Jona<br><br>2015=E5=B9=B42=E6=9C=8821=E6=97=A5=E5=9C=9F=E6=9B=9C=E6=97=A5=
=E3=80=81=E6=9C=A8=E3=83=8E=E4=B8=8B=E3=81=98=E3=82=87=E3=81=AA&lt;<a href=
=3D"mailto:kinoshitajona@gmail.com">kinoshitajona@gmail.com</a>&gt;=E3=81=
=95=E3=82=93=E3=81=AF=E6=9B=B8=E3=81=8D=E3=81=BE=E3=81=97=E3=81=9F:<br><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #c=
cc solid;padding-left:1ex"><div dir=3D"ltr">Hello All,<br><br>I have put to=
gether a proposal for a new generation methodology of HD wallets.<br><br>Th=
e method is a modification of BIP32, so if something is unclear or not expl=
icit, please assume it follows BIP32.<br><br>I am looking forward to any an=
d all criticism and help with writing / making the BIP more secure.<br><br>=
If some of my pseudo code / English is off I apologize, I am not good with =
words.<br><br>If this is deemed worthy enough to be drafted into a BIP, I w=
ould appreciate if someone could tell me what the overall step by step flow=
 would be.<br><br>Thank you, I will paste the link to the proposal below.<b=
r>Jona<br><br><a href=3D"https://gist.github.com/dabura667/875bb2c159b219c1=
8885" target=3D"_blank">https://gist.github.com/dabura667/875bb2c159b219c18=
885</a><br><br>--<br>-----BEGIN PGP PUBLIC KEY BLOCK-----<br>Comment: <a hr=
ef=3D"http://openpgpjs.org" target=3D"_blank">http://openpgpjs.org</a><br><=
br>xsBNBFTmJ8oBB/9rd+7XLxZG/x/KnhkVK2WBG8ySx91fs+qQfHIK1JrakSV3<br>x6x0cK3X=
LClASLLDomm7Od3Q/fMFzdwCEqj6z60T8wgKxsjWYSGL3mq8ucdv<br>iBjC3wGauk5dQKtT7tk=
CFyQQbX/uMsBM4ccGBICoDmIJlwJIj7fAZVqGxGOM<br>bO1RhYb4dbQA2qxYP7wSsHJ6/ZNAXy=
EphOj6blUzdqO0exAbCOZWWF+E/1SC<br>EuKO4RmL7Imdep7uc2Qze1UpJCZx7ASHl2IZ4UD0G=
3Qr3pI6/jvNlaqCTa3U<br>3/YeJwEubFsd0AVy0zs809RcKKgX3W1q+hVDTeWinem9RiOG/vT+=
Eec/ABEB<br>AAHNI2tpbm9zaGl0YSA8a2lub3NoaXRham9uYUBnbWFpbC5jb20+wsByBBAB<br=
>CAAmBQJU5ifRBgsJCAcDAgkQRB9iZ30dlisEFQgCCgMWAgECGwMCHgEAAC6Z<br>B/9otobf0A=
SHYdlUBeIPXdDopyjQhR2RiZGYaS0VZ5zzHYLDDMW6ZIYm5CjO<br>Fc09ETLGKFxH2RcCOK2dz=
wz+KRU4xqOrt/l5gyd50cFE1nOhUN9+/XaPgrou<br>WhyT9xLeGit7Xqhht93z2+VanTtJAG6l=
WbAZLIZAMGMuLX6sJDCO0GiO5zxa<br>02Q2D3kh5GL57A5+oVOna12JBRaIA5eBGKVCp3KToT/=
z48pxBe3WAmLo0zXr<br>hEgTSzssfb2zTwtB3Ogoedj+cU2bHJvJ8upS/jMr3TcdguySmxJlGp=
ocVC/e<br>qxq12Njv+LiETOrD8atGmXCnA+nFNljBkz+l6ADl93jHzsBNBFTmJ9EBCACu<br>Q=
q9ZnP+aLU/Rt6clAfiHfTFBsJvLKsdIKeE6qHzsU1E7A7bGQKTtLEnhCCQE<br>W+OQP+sgbOWo=
wIdH9PpwLJ3Op+NhvLlMxRvbT36LwCmBL0yD7bMqxxmmVj8n<br>vlMMRSe4wDSIG19Oy7701im=
nHZPm/pnPlneg/Meu/UffpcDWYBbAFX8nrXPY<br>vkVULcI/qTcCxW/+S9fwoXjQhWHaiJJ6y3=
cYOSitN31W9zgcMvLwLX3JgDxE<br>flkwq/M+ZkfCYnS3GAPEt8GkVKy2eHtCJuNkGFlCAmKMX=
0yWzHRAkqOMN5KP<br>LFbkKY2GQl13ztWp82QYJZpj5af6dmyUosurn6AZABEBAAHCwF8EGAEI=
ABMF<br>AlTmJ9QJEEQfYmd9HZYrAhsMAABKbgf/Ulu5JAk4fXgH0DtkMmdkFiKEFdkW<br>0Wk=
w7Vhd5eZ4NzeP9kOkD01OGweT9hqzwhfT2CNXCGxh4UnvEM1ZMFypIKdq<br>0XpLLJMrDOQO02=
1UjAa56vHZPAVmAM01z5VzHJ7ekjgwrgMLmVkm0jWKEKaO<br>n/MW7CyphG7QcZ6cJX2f6uJce=
kBlZRw9TNYRnojMjkutlOVhYJ3J78nc/k0p<br>kcgV63GB6D7wHRF4TVe4xIBqKpbBhhN+ISwF=
N1z+gx3lfyRMSmiTSrGdKEQe<br>XSIQKG8XZQZUDhLNkqPS+7EMV1g7+lOfT4GhLL68dUXDa1e=
9YxGH6zkpVECw<br>Spe3vsHZr6CqFg=3D=3D<br>=3D/vUJ<br>-----END PGP PUBLIC KEY=
 BLOCK-----<br></div>
</blockquote></div><br><br>-- <br><div dir=3D"ltr"><div>-----BEGIN PGP PUBL=
IC KEY BLOCK-----</div><div>Comment: <a href=3D"http://openpgpjs.org" targe=
t=3D"_blank">http://openpgpjs.org</a></div><div><br></div><div>xsBNBFTmJ8oB=
B/9rd+7XLxZG/x/KnhkVK2WBG8ySx91fs+qQfHIK1JrakSV3</div><div>x6x0cK3XLClASLLD=
omm7Od3Q/fMFzdwCEqj6z60T8wgKxsjWYSGL3mq8ucdv</div><div>iBjC3wGauk5dQKtT7tkC=
FyQQbX/uMsBM4ccGBICoDmIJlwJIj7fAZVqGxGOM</div><div>bO1RhYb4dbQA2qxYP7wSsHJ6=
/ZNAXyEphOj6blUzdqO0exAbCOZWWF+E/1SC</div><div>EuKO4RmL7Imdep7uc2Qze1UpJCZx=
7ASHl2IZ4UD0G3Qr3pI6/jvNlaqCTa3U</div><div>3/YeJwEubFsd0AVy0zs809RcKKgX3W1q=
+hVDTeWinem9RiOG/vT+Eec/ABEB</div><div>AAHNI2tpbm9zaGl0YSA8a2lub3NoaXRham9u=
YUBnbWFpbC5jb20+wsByBBAB</div><div>CAAmBQJU5ifRBgsJCAcDAgkQRB9iZ30dlisEFQgC=
CgMWAgECGwMCHgEAAC6Z</div><div>B/9otobf0ASHYdlUBeIPXdDopyjQhR2RiZGYaS0VZ5zz=
HYLDDMW6ZIYm5CjO</div><div>Fc09ETLGKFxH2RcCOK2dzwz+KRU4xqOrt/l5gyd50cFE1nOh=
UN9+/XaPgrou</div><div>WhyT9xLeGit7Xqhht93z2+VanTtJAG6lWbAZLIZAMGMuLX6sJDCO=
0GiO5zxa</div><div>02Q2D3kh5GL57A5+oVOna12JBRaIA5eBGKVCp3KToT/z48pxBe3WAmLo=
0zXr</div><div>hEgTSzssfb2zTwtB3Ogoedj+cU2bHJvJ8upS/jMr3TcdguySmxJlGpocVC/e=
</div><div>qxq12Njv+LiETOrD8atGmXCnA+nFNljBkz+l6ADl93jHzsBNBFTmJ9EBCACu</di=
v><div>Qq9ZnP+aLU/Rt6clAfiHfTFBsJvLKsdIKeE6qHzsU1E7A7bGQKTtLEnhCCQE</div><d=
iv>W+OQP+sgbOWowIdH9PpwLJ3Op+NhvLlMxRvbT36LwCmBL0yD7bMqxxmmVj8n</div><div>v=
lMMRSe4wDSIG19Oy7701imnHZPm/pnPlneg/Meu/UffpcDWYBbAFX8nrXPY</div><div>vkVUL=
cI/qTcCxW/+S9fwoXjQhWHaiJJ6y3cYOSitN31W9zgcMvLwLX3JgDxE</div><div>flkwq/M+Z=
kfCYnS3GAPEt8GkVKy2eHtCJuNkGFlCAmKMX0yWzHRAkqOMN5KP</div><div>LFbkKY2GQl13z=
tWp82QYJZpj5af6dmyUosurn6AZABEBAAHCwF8EGAEIABMF</div><div>AlTmJ9QJEEQfYmd9H=
ZYrAhsMAABKbgf/Ulu5JAk4fXgH0DtkMmdkFiKEFdkW</div><div>0Wkw7Vhd5eZ4NzeP9kOkD=
01OGweT9hqzwhfT2CNXCGxh4UnvEM1ZMFypIKdq</div><div>0XpLLJMrDOQO021UjAa56vHZP=
AVmAM01z5VzHJ7ekjgwrgMLmVkm0jWKEKaO</div><div>n/MW7CyphG7QcZ6cJX2f6uJcekBlZ=
Rw9TNYRnojMjkutlOVhYJ3J78nc/k0p</div><div>kcgV63GB6D7wHRF4TVe4xIBqKpbBhhN+I=
SwFN1z+gx3lfyRMSmiTSrGdKEQe</div><div>XSIQKG8XZQZUDhLNkqPS+7EMV1g7+lOfT4GhL=
L68dUXDa1e9YxGH6zkpVECw</div><div>Spe3vsHZr6CqFg=3D=3D</div><div>=3D/vUJ</d=
iv><div>-----END PGP PUBLIC KEY BLOCK-----</div></div><br>

--001a113d36e4e36eb8050fba485d--