pointbiz

Offline

Activity: 433

Merit: 252

1ninja

Sr. MemberActivity: 433Merit: 2521ninja Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key [BOUNTY 0.1BTC] October 11, 2011, 02:41:18 AM #121 Quote from: casascius on October 11, 2011, 02:03:30 AM I don't think there exists such thing as a "standard format" in base58 that's < 51 characters. The standard base58 format is the sipa wallet import format. I also wouldn't offer it in base64 unless something else uses it prominently (e.g. OpenSSL, but OpenSSL uses hex). These unused formats will just serve to confuse people.

Also, hexadecimal is misspelled on the actual website.

LOL. I guess Standard Format didn't exist until MagicalTux created it... maybe I'm adding to the problem. I don't want to cause confusion.

Mtgox still doesn't work with WIF. I added the base64 only because it was available in the .toString() method for the ECKey and I assumed Stephan had a reason for that. I'm going to double check Mtgox works with hex. Hopefully they fix the WIF bug soon. Did MtGox stop accepting in the "standard format"? Because I tried it a few days ago and it worked. LOL. I guess Standard Format didn't exist until MagicalTux created it... maybe I'm adding to the problem. I don't want to cause confusion.Mtgox still doesn't work with WIF. I added the base64 only because it was available in the .toString() method for the ECKey and I assumed Stephan had a reason for that. I'm going to double check Mtgox works with hex. Hopefully they fix the WIF bug soon. Did MtGox stop accepting in the "standard format"? Because I tried it a few days ago and it worked. Thread

Open Source JavaScript Client-Side Bitcoin Wallet Generator

Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN Coder of: https://www.bitaddress.org Open Source JavaScript Client-Side Bitcoin Wallet GeneratorDonations:1bUmhSoTXozBRBEtR8LeF9TGbZBN PGP

Your Bitcoin transactions The Ultimate Bitcoin mixer made truly anonymous. with an advanced technology. Mix coins

Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.

casascius

VIP

Legendary

Offline

Activity: 1386

Merit: 1041

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Mike CaldwellVIPLegendaryActivity: 1386Merit: 1041The Casascius 1oz 10BTC Silver Round (w/ Gold B) Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key [BOUNTY 0.1BTC] October 11, 2011, 02:45:31 AM #123 MtGox only accepted that format because MagicalTux was confused as to how the format worked. Nothing generates keys in that format, and quite frankly there is no advantage to doing it because it takes away the error checking for no good reason. It would be best not to propagate new formats for keys that don't serve any particular purpose, otherwise everybody will have to support them for everything. Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.

casascius

VIP

Legendary

Offline

Activity: 1386

Merit: 1041

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Mike CaldwellVIPLegendaryActivity: 1386Merit: 1041The Casascius 1oz 10BTC Silver Round (w/ Gold B) Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key [BOUNTY 0.1BTC] October 11, 2011, 01:16:26 PM #128 MagicalTux reports having fixed this. It now accepts Base58 private keys, and I was able to import one as a test. Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.

pointbiz

Offline

Activity: 433

Merit: 252

1ninja

Sr. MemberActivity: 433Merit: 2521ninja Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key [BOUNTY 0.1BTC] October 13, 2011, 01:36:53 AM #131 Quote from: casascius on September 16, 2011, 04:33:56 AM A deterministic generation function does one more very valuable thing from an auditability perspective that has nothing to do with recreating wallets. Supporting deterministic generation from a passphrase allows the average user to control for the possibility that the RNG in your generator isn't rigged or flawed in a non-obvious manner. If your RNG turns out to be flawed at any time down the road, it would turn into a huge liability for anyone who has ever used your generator. (Google "Debian OpenSSL key flaw" for an example of a past occurrence of this mess). On the other hand, if it produces the same deterministic wallet as any other program made for the same purpose, it can be conclusively deemed to operate as advertised.

The Wallet Details tab can now be used for the purpose of creating a deterministic wallet. You can use the tab to determine if you have a valid private key in one of various formats and what the bitcoin address is for that key.

It's also useful if you're in a highly adversarial environment and you believe a weakness in the PRNG could expose your private key. To protect against that you could copy the key you generate on the single wallet tab and paste it on the wallet details tab and adjust a few characters then view the details to confirm it's a valid private key and see it's bitcoin address. The Wallet Details tab can now be used for the purpose of creating a deterministic wallet. You can use the tab to determine if you have a valid private key in one of various formats and what the bitcoin address is for that key.It's also useful if you're in a highly adversarial environment and you believe a weakness in the PRNG could expose your private key. To protect against that you could copy the key you generate on the single wallet tab and paste it on the wallet details tab and adjust a few characters then view the details to confirm it's a valid private key and see it's bitcoin address. Thread

Open Source JavaScript Client-Side Bitcoin Wallet Generator

Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN Coder of: https://www.bitaddress.org Open Source JavaScript Client-Side Bitcoin Wallet GeneratorDonations:1bUmhSoTXozBRBEtR8LeF9TGbZBN PGP