Hierarchical deterministic Bitcoin wallets that tolerate key leakage (short paper)


Autoria(s): Gutoski, Gus; Stebila, Douglas
Contribuinte(s)

Böhme, Rainer

Okamoto, Tatsuaki

Data(s)

26/01/2015

Resumo

A Bitcoin wallet is a set of private keys known to a user and which allow that user to spend any Bitcoin associated with those keys. In a hierarchical deterministic (HD) wallet, child private keys are generated pseudorandomly from a master private key, and the corresponding child public keys can be generated by anyone with knowledge of the master public key. These wallets have several interesting applications including Internet retail, trustless audit, and a treasurer allocating funds among departments. A specification of HD wallets has even been accepted as Bitcoin standard BIP32. Unfortunately, in all existing HD wallets---including BIP32 wallets---an attacker can easily recover the master private key given the master public key and any child private key. This vulnerability precludes use cases such as a combined treasurer-auditor, and some in the Bitcoin community have suspected that this vulnerability cannot be avoided. We propose a new HD wallet that is not subject to this vulnerability. Our HD wallet can tolerate the leakage of up to m private keys with a master public key size of O(m). We prove that breaking our HD wallet is at least as hard as the so-called "one more" discrete logarithm problem.

Formato

application/pdf

Identificador

http://eprints.qut.edu.au/82221/

Publicador

Springer

Relação

http://eprints.qut.edu.au/82221/1/hdwallet.pdf

DOI:10.1007/978-3-662-47854-7_31

Gutoski, Gus & Stebila, Douglas (2015) Hierarchical deterministic Bitcoin wallets that tolerate key leakage (short paper). In Böhme, Rainer & Okamoto, Tatsuaki (Eds.) Financial Cryptography and Data Security: 19th International Conference, FC 2015, Revised Selected Papers [Lecture Notes in Computer Science, Volume 8975], Springer, San Juan, Puerto Rico, United States of America, pp. 497-504.

http://purl.org/au-research/grants/ARC/DP130104304

Direitos

Copyright 2015 International Financial Cryptography Association

Fonte

School of Electrical Engineering & Computer Science; Institute for Future Environments; Science & Engineering Faculty

Palavras-Chave #080402 Data Encryption #Bitcoin
Tipo

Conference Paper