julien
@julien51.eth
Any ethers/cryptography expert? How bad is that code? https://gist.github.com/julien51/b72db711bda3e940afbe77c96d7d727d I am trying to generate a private key consistently from a secret... (Complicated secret with upper/lower case numbers and symbols!)
3 replies
1 recast
1 reaction
Cassie Heart
@cassie
Going to echo Ric here — hashing passwords directly for use as private keys is a really bad idea, because people tend to not remember strong passwords that can’t get churned out by hardware quickly. Once you hit the equivalent level of entropy of regular seed phrases, well, might as well just go back to mnemonics
3 replies
0 recast
3 reactions
JA Westenberg
@daojoan.eth
Co-sign
0 reply
0 recast
2 reactions
Agost Biro
@agostbiro
One consideration with mnemonics though is that people are conditioned to copy paste them all over the place. I prefer generating a 20 char random password from a sensible base32 alphabet. This gives 100-bit entropy and it’s not too annoying to handle, eg. ‘8FD93-EYWZR-GB7HX-QAVNS’
1 reply
0 recast
1 reaction
julien
@julien51.eth
Ha! That's indeed a very good point. I should have clarified that this is not meant to be used to hold significant value in the long run... And indeed the user won't choose them.
0 reply
0 recast
0 reaction
