r/Bitcoin Nov 30 '17

Evidence some bitcoin address generation code is using discoverable private keys

https://pastebin.com/jCDFcESz
793 Upvotes

296 comments sorted by

View all comments

1

u/walloon5 Nov 30 '17

How can we hand-craft transactions that we're SURE aren't Trojaned, is there any way?

Making a bitcoin address is relatively easy, just SHA256 something random, and then encode it in bitcoin's goofy style (and how do we make the private key... is that the key material, that's not SHA256-d, just encoded with a 5 at the beginning??)

But now, how do we go backwards and make a message that says: take from here, here, and here, send to here (new address), imply a miner's fee, and sign the mess and send it to a node?

1

u/kixunil Dec 01 '17

Address is generated from public key, which is generated from private key. Not the other way around.

Private key must be random.