>> (p.1)
    Author Topic: Passphrase utility  (Read 2657 times)
    theymos (OP)
    Administrator
    Legendary
    *
    Offline Offline

    Activity: 5726
    Merit: 14677


    View Profile
    March 03, 2013, 05:42:27 AM
     #1

    I've written a little Python utility for securely creating keys (private keys, encryption keys, deterministic wallet seeds, etc.) from passphrases. It asks you for some impossible-to-forget info about yourself for use as seed to prevent hash precomputation attacks, and it hashes your passphrase over one million times to make brute-force attacks very slow.

    I created this because several tools seem to be handling passphrases wrongly. brainwallet.org just does one unsalted sha256 hash of passphrases, which is terribly insecure. Electrum wants you to memorize 12 words, which is unnecessarily long. With this tool, a totally random and unique 6-word or 11-character passphrase should be secure.

    I tried to make it so non-ASCII characters are hashed the same across all platforms, but I'm not sure whether I got it right. I'd be careful about using non-ASCII characters.

    1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
Page 1
Viewing Page: 1