Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of petertodd.org
	designates 62.13.149.56 as permitted sender)
	client-ip=62.13.149.56; envelope-from=pete@petertodd.org;
	helo=outmail149056.authsmtp.com; 
Date: Fri, 24 Jan 2014 04:05:32 -0500
From: Peter Todd <pete@petertodd.org>
To: Thomas Voegtlin <thomasv1@gmx.de>
Message-ID: <20140124090532.GB15398@savin>
References: <CAJna-HjGHpru6Lpv_tXUkWR2mX-=fobzojtHYvSRJy6+CMesOA@mail.gmail.com>
	<CANg-TZCrpT-YJ0WV9VY6w-PtCiz2YRMBCMvmjneDz13j2namkw@mail.gmail.com>
	<20140120223502.GA1055@petertodd.org>
	<CANOOu=_pVCPiDtbqc3EwToZWzjLw4UqOvpsu2Wrt4eDKC7g_2g@mail.gmail.com>
	<CAJna-HgStwQQUiNZfJrFS1SduuzEEVrF=qmVe23uqZUNhHkOHA@mail.gmail.com>
	<52DDB8AB.4010103@gmx.de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="1UWUbFP1cBYEclgG"
Content-Disposition: inline
In-Reply-To: <52DDB8AB.4010103@gmx.de>
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: bitcoin-development@lists.sourceforge.net
Subject: Re: [Bitcoin-development] BIP0039: Final call
Precedence: list


--1UWUbFP1cBYEclgG
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Jan 21, 2014 at 01:00:43AM +0100, Thomas Voegtlin wrote:
> Hi slush,
>=20
> Thank you for your new proposal; it seems to be a compromise.
>=20
> @Christophe Biocca:
> If the wordlist becomes part of the standard, then we will run into
> problems of collisions once users ask for wordlists in every language.
>=20
> IMO the right approach is to implement checksums that do not depend
> on the wordlist (eg the 'brute force' method, Hash(mnemonic||1) mod
> 2^k =3D=3D 0 )
> this would also allow us to implement sipa's variable stretching proposal.
>=20
> I understand this is not possible because of the computational
> requirements of devices such as trezor.

Is it? Surely the trezor can bruteforce, say, 8 bits =3D=3D 0. How many
SHA256/sec can the trezor hardware do? Generating your seed is a
one-time thing after all - that taking 10-30s doesn't seem like a big
deal to me.

Even a 1/256th "checksum" will really cut down on the number of mistakes
made and money lost.

--=20
'peter'[:-1]@petertodd.org
0000000000000001d8b9d438c18e856735ddae5b1d918416010350d19794aab6

--1UWUbFP1cBYEclgG
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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==
=eGcy
-----END PGP SIGNATURE-----

--1UWUbFP1cBYEclgG--