julien
@julien51.eth
Any ethers/cryptography expert? How bad is that code? https://gist.github.com/julien51/b72db711bda3e940afbe77c96d7d727d I am trying to generate a private key consistently from a secret... (Complicated secret with upper/lower case numbers and symbols!)
3 replies
1 recast
1 reaction
Cassie Heart
@cassie
Going to echo Ric here — hashing passwords directly for use as private keys is a really bad idea, because people tend to not remember strong passwords that can’t get churned out by hardware quickly. Once you hit the equivalent level of entropy of regular seed phrases, well, might as well just go back to mnemonics
3 replies
0 recast
3 reactions
Agost Biro
@agostbiro
One consideration with mnemonics though is that people are conditioned to copy paste them all over the place. I prefer generating a 20 char random password from a sensible base32 alphabet. This gives 100-bit entropy and it’s not too annoying to handle, eg. ‘8FD93-EYWZR-GB7HX-QAVNS’
1 reply
0 recast
1 reaction
Agost Biro
@agostbiro
(Ofc best to put this through a secure password-based KDF as well before deriving keys)
0 reply
0 recast
1 reaction
