Questions tagged [keymanagement]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
32 views

TypedData signature using Quorum Key Manager is failing/not verified

I am trying to create a TypedData transaction using OpenZeppelin Defender. I am using the OpenZeppelin MinimalForwarder to verify the authenticity of the signer. To create the signature, I am using ...
Subhadeep Karmakar's user avatar
0 votes
1 answer
170 views

How to store private key on a VPS in a secure manner?

I have a service which will interract with my smart contract which will include money transfer. For this reason, a private key of the owner or deployer of a smart contract will have to be store on a ...
Kum's user avatar
  • 75
2 votes
0 answers
91 views

How to derive ethereum address from Elliptic Curve secp256k1 - SHA256 Digest

I am using google cloud key management service to generate and manage keys. I have generated the HSM key for Asymmetric signing using Elliptic Curve secp256k1 - SHA256 Digest. The public key is ...
DIGVJSS's user avatar
  • 200
0 votes
1 answer
28 views

Is authentication effectively decentralised?

I can't quite see the solution to this; so I'm questioning for clarity. My understanding from the docs is that it appears that the process is dentralised: Generate your private key (according to ...
David Boshton's user avatar
0 votes
1 answer
333 views

one wallet address, multiple users, what is the best way to keep the private key secured?

I would like to develop an application using the web3j. However, it needs to be just one wallet that multiple users will deposit and withdraw from. The allowances are kept in a centralized database. ...
Damir Olejar's user avatar
0 votes
0 answers
176 views

Generating a private key without a library

As far as I understand, a private key in the context of Ethereum is simply 256 random bits. The actual application of secp256k1 comes in when converting this to the public key, signing, etc. Based on ...
Guiomar Raissa's user avatar
1 vote
0 answers
67 views

Gas station network use cases

I'm trying to understand the purpose of EIP 1613. Related to this website says "No more Metamask". So it assumes that a user does not have direct access to his private key / wallet. It means the key ...
Ivan Zakharov's user avatar
0 votes
1 answer
238 views

Contract with multiple signing keys

How things work I have a Factory contract, FContract. FContract can be called by a user as many times as they want, creating instances of, let's call it, contractA. Thus, they're able to own as many ...
GeorgePal's user avatar
1 vote
1 answer
190 views

Who approves my public key in Ethereum network?

In a PKI approach, a public key is approved by a Certificate Authority (CA) in a centralized manner. However, since Ethereum is a decentralized network, how is my public key validity is approved? Or, ...
Questioner's user avatar
  • 2,640
2 votes
2 answers
1k views

Receive Ether to multiple addresses best practice

Say I am an exchange that has many users. When I ask a user to deposit ETH I give him a unique address so I can attribute the ETH to him. With Bitcoin this is easy. The bitcoin wallet software ...
Juraj Petrik's user avatar
2 votes
0 answers
389 views

Customizable key generator for Node JS

I've been looking for a javescript/nodejs package that would take a passphrase as input and generate a public key. But I need it to produce the exact same public key with the exact same passphrase - ...
The Monster's user avatar
1 vote
1 answer
132 views

Account management risks of booting into Tails OS from USB using a "partially air-gapped" Linux PC

My threat tolerance is around a 3 out of 5 on the paranoia scale. What are the practical account management risks of using a flash drive loaded with Tails OS to boot into a Linux PC, which will only ...
etherpunk's user avatar
0 votes
2 answers
684 views

Key management in Ethereum desktop application

I am making a desktop dapp using Ethereum, web3.js, truffle, electron, and react. This will be a ethereum private blockchain. I can make, compile, deploy, call, transact, on testRPC using the ...
Manish's user avatar
  • 3
0 votes
1 answer
2k views

From which HD wallet node is the private key in ethereum generated from?

I know how to generate a valid mnemonic and a valid address associated with that mnemonic. However I'm unsure how to generate a private key in ethereum. In Bitcoin, the master node is where you'd get ...
arshbot's user avatar
  • 357
5 votes
1 answer
5k views

Difference between Account Extended Private Key and BIP32 Extended Private Key

I was using this this useful tool to verify that my wallet generation process was accurate, however when I thought I was generating an Account Extended Private Key, I realized I was actually ...
arshbot's user avatar
  • 357
4 votes
1 answer
2k views

Significance of '60' for cointype?

When constructing the path for a node in a wallet tree, the default value for cointype is 60 for ethereum. Why is that?
arshbot's user avatar
  • 357
3 votes
0 answers
4k views

Does MetaMask provide access to acount's keystore file?

I am looking for my account's keystore file. I know usually this is only available through geth. MetaMask already provides the private key, but I'm not looking for the the private key, I'm looking ...
Nicholas Porter's user avatar
1 vote
1 answer
874 views

Derive address from Json Web Key

I have a Json Web Key that contains public key information and I'd like to derive ethereum address from it. I understand the process of getting the address by hashing using Keccak from the public key ...
Tomislav Markovski's user avatar
0 votes
1 answer
252 views

Managing keys/accounts external to Geth?

I know that Geth requires that you have your wallet files located in the ./keystore directory and that you are required to unlock an account before using it. However, one of our potential use cases is ...
jordaniac89's user avatar
1 vote
1 answer
229 views

Why geth use scrypt for key derivation?

As I understand scrypt was designed to be computationally intensive, so that it takes a relatively long time to compute. For what geth need this? And why it does not use, for example, SHA-256?
Ivan Violentov's user avatar
0 votes
2 answers
215 views

How to limit function access to certain frontend?

I've a function in my smartcontract, that pays out ETH to the sender. However it sgould be only callable from registered users on my website, regardless of their ETH-address. I already tried to send ...
Jerry's user avatar
  • 714
3 votes
2 answers
2k views

How to get my 256bits Public Key on geth

I created an account on geth by geth account new, I can see the address by geth account list and this address is derived by using the public key. Is there a way I can check the public key of my ...
Consy's user avatar
  • 572
5 votes
2 answers
892 views

Can an Ethereum contract autonomously and securely manage a bitcoin wallet

I'm wondering if it's possible to have an Ethereum token that is backed by pooled bitcoin (and therefore has 1:1 value parity with Bitcoin) in a trustless way. With tokens issued and destroyed as ...
Justin Maxwell's user avatar
17 votes
1 answer
8k views

Location of public and private keys of Ethereum account

I want to know the details about key generation and handling in Parity. The questions listed are all related, so I put them all in this one question post. When a new Ethereum account is created on ...
Ajoy Bhatia's user avatar
  • 1,446
2 votes
1 answer
278 views

Is the address under the Ethbase account in mist a public address?

Is the address under the Ethbase account in mist a public address? If so, how do I find the related private key?
Luza's user avatar
  • 181
8 votes
1 answer
312 views

Is ethereumwallet.com generating the keys client-side?

Is ethereumwallet.com generating the all the keys, accounts and transactions client-side? Is it legit and safe to use? Is it possible to confirm the javascript has no backdoors? Can it be trusted?
q9f's user avatar
  • 32.6k
50 votes
2 answers
49k views

How do I backup my ether accounts?

I want to backup my accounts onto a USB or other external device for safe-keeping. How can I do that?
Ethan Wilding's user avatar
35 votes
3 answers
9k views

What is a replay attack?

During the launch of the frontier network, users were cautioned not to reuse keys from the Olympic testnet in order to prevent "replay attacks". What is a replay attack, and why would re-using a key ...
Jeff Coleman's user avatar
  • 21.9k