omnilaboratory/OmniBOLT-spec

alice private key,HD chain issue?

Open

#1 aperta il 27 mar 2020

Vedi su GitHub
 (33 commenti) (0 reazioni) (1 assegnatario) (8 fork)auto 404
good first issue

Metriche repository

Star
 (268 star)
Metriche merge PR
 (Nessuna PR mergiata in 30 g)

Descrizione

bip44 defines the bip32 as follows for convention:

m / purpose' / coin_type' / account' / change / address_index

anything under account is not-hardened meaning a public key of account or higher + private key can lead to all private keys at change or under.

what temporary key is Alice's used to send to bob in your examples? Most wallets now are HD key based and so when an HD key is derived it will send that private key, so potentially any private keys can be found under the account level of Alice's hd chain if Bob finds out about Alice's pubkey one or more levels up from change in the HD chain strategy. Am I thinking about it the wrong way? Where is this key created I assume it would be an address where Alice owns some asset in which case it would be a key in the hd keychain likely.

particularly it seems change may be at risk if there is some in there.

Guida contributor