Questions tagged [keymanagement]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
38 views

Basic HSM for the mass generation of ethereum keys

I'm looking to generate a lot of public / private key pairs (i.e. in the order of +100,000s). I would like to be able to do this on a budget HSM. The assets owned by the keys are effectively value-...
2 votes
1 answer
36 views

Regenerating validation keys with ethereum staking

I am not in this situation but I want to understand what happens if: I have generated Ethereum validation keys. I have transferred this validations keys to a server (validation node), without keeping ...
2 votes
1 answer
115 views

How to derive ethereum address from Elliptic Curve secp256k1 - SHA256 Digest

I am using google cloud key management service to generate and manage keys. I have generated the HSM key for Asymmetric signing using Elliptic Curve secp256k1 - SHA256 Digest. The public key is ...
1 vote
0 answers
34 views

TypedData signature using Quorum Key Manager is failing/not verified

I am trying to create a TypedData transaction using OpenZeppelin Defender. I am using the OpenZeppelin MinimalForwarder to verify the authenticity of the signer. To create the signature, I am using ...
0 votes
1 answer
273 views

How to store private key on a VPS in a secure manner?

I have a service which will interract with my smart contract which will include money transfer. For this reason, a private key of the owner or deployer of a smart contract will have to be store on a ...
0 votes
1 answer
362 views

one wallet address, multiple users, what is the best way to keep the private key secured?

I would like to develop an application using the web3j. However, it needs to be just one wallet that multiple users will deposit and withdraw from. The allowances are kept in a centralized database. ...
0 votes
1 answer
243 views

Contract with multiple signing keys

How things work I have a Factory contract, FContract. FContract can be called by a user as many times as they want, creating instances of, let's call it, contractA. Thus, they're able to own as many ...
0 votes
1 answer
28 views

Is authentication effectively decentralised?

I can't quite see the solution to this; so I'm questioning for clarity. My understanding from the docs is that it appears that the process is dentralised: Generate your private key (according to ...
8 votes
1 answer
322 views

Is ethereumwallet.com generating the keys client-side?

Is ethereumwallet.com generating the all the keys, accounts and transactions client-side? Is it legit and safe to use? Is it possible to confirm the javascript has no backdoors? Can it be trusted?
0 votes
0 answers
197 views

Generating a private key without a library

As far as I understand, a private key in the context of Ethereum is simply 256 random bits. The actual application of secp256k1 comes in when converting this to the public key, signing, etc. Based on ...
1 vote
0 answers
68 views

Gas station network use cases

I'm trying to understand the purpose of EIP 1613. Related to this website says "No more Metamask". So it assumes that a user does not have direct access to his private key / wallet. It means the key ...
6 votes
1 answer
5k views

Difference between Account Extended Private Key and BIP32 Extended Private Key

I was using this this useful tool to verify that my wallet generation process was accurate, however when I thought I was generating an Account Extended Private Key, I realized I was actually ...
1 vote
1 answer
200 views

Who approves my public key in Ethereum network?

In a PKI approach, a public key is approved by a Certificate Authority (CA) in a centralized manner. However, since Ethereum is a decentralized network, how is my public key validity is approved? Or, ...
36 votes
3 answers
9k views

What is a replay attack?

During the launch of the frontier network, users were cautioned not to reuse keys from the Olympic testnet in order to prevent "replay attacks". What is a replay attack, and why would re-using a key ...
2 votes
2 answers
1k views

Receive Ether to multiple addresses best practice

Say I am an exchange that has many users. When I ask a user to deposit ETH I give him a unique address so I can attribute the ETH to him. With Bitcoin this is easy. The bitcoin wallet software ...
50 votes
2 answers
49k views

How do I backup my ether accounts?

I want to backup my accounts onto a USB or other external device for safe-keeping. How can I do that?
2 votes
0 answers
401 views

Customizable key generator for Node JS

I've been looking for a javescript/nodejs package that would take a passphrase as input and generate a public key. But I need it to produce the exact same public key with the exact same passphrase - ...
1 vote
1 answer
139 views

Account management risks of booting into Tails OS from USB using a "partially air-gapped" Linux PC

My threat tolerance is around a 3 out of 5 on the paranoia scale. What are the practical account management risks of using a flash drive loaded with Tails OS to boot into a Linux PC, which will only ...
0 votes
2 answers
695 views

Key management in Ethereum desktop application

I am making a desktop dapp using Ethereum, web3.js, truffle, electron, and react. This will be a ethereum private blockchain. I can make, compile, deploy, call, transact, on testRPC using the ...
3 votes
2 answers
2k views

How to get my 256bits Public Key on geth

I created an account on geth by geth account new, I can see the address by geth account list and this address is derived by using the public key. Is there a way I can check the public key of my ...
17 votes
1 answer
8k views

Location of public and private keys of Ethereum account

I want to know the details about key generation and handling in Parity. The questions listed are all related, so I put them all in this one question post. When a new Ethereum account is created on ...
0 votes
1 answer
2k views

From which HD wallet node is the private key in ethereum generated from?

I know how to generate a valid mnemonic and a valid address associated with that mnemonic. However I'm unsure how to generate a private key in ethereum. In Bitcoin, the master node is where you'd get ...
4 votes
1 answer
2k views

Significance of '60' for cointype?

When constructing the path for a node in a wallet tree, the default value for cointype is 60 for ethereum. Why is that?
3 votes
0 answers
4k views

Does MetaMask provide access to acount's keystore file?

I am looking for my account's keystore file. I know usually this is only available through geth. MetaMask already provides the private key, but I'm not looking for the the private key, I'm looking ...
1 vote
1 answer
912 views

Derive address from Json Web Key

I have a Json Web Key that contains public key information and I'd like to derive ethereum address from it. I understand the process of getting the address by hashing using Keccak from the public key ...
0 votes
1 answer
265 views

Managing keys/accounts external to Geth?

I know that Geth requires that you have your wallet files located in the ./keystore directory and that you are required to unlock an account before using it. However, one of our potential use cases is ...
1 vote
1 answer
236 views

Why geth use scrypt for key derivation?

As I understand scrypt was designed to be computationally intensive, so that it takes a relatively long time to compute. For what geth need this? And why it does not use, for example, SHA-256?
1 vote
2 answers
225 views

How to limit function access to certain frontend?

I've a function in my smartcontract, that pays out ETH to the sender. However it sgould be only callable from registered users on my website, regardless of their ETH-address. I already tried to send ...
5 votes
2 answers
895 views

Can an Ethereum contract autonomously and securely manage a bitcoin wallet

I'm wondering if it's possible to have an Ethereum token that is backed by pooled bitcoin (and therefore has 1:1 value parity with Bitcoin) in a trustless way. With tokens issued and destroyed as ...
2 votes
1 answer
280 views

Is the address under the Ethbase account in mist a public address?

Is the address under the Ethbase account in mist a public address? If so, how do I find the related private key?