Re:DOJ seizes $2.3M in cryptocurrency paid to the ransomware...
by mrkramer on Tuesday June 08, 2021 @04:13AM
(#27431819)
They seized private key and if it was encrypted/hashed they cracked it. It could've Bitcoin brain wallet and they cracked the actual ASCII password of the wallet.
[ Parent
| on HN ]
Re:DOJ seizes $2.3M in cryptocurrency paid to the ransomware...
by avhwl on Tuesday June 08, 2021 @06:04AM
(#27432531)
If the private key was hashed, and they only had the hash, then they could not crack it. Hashing is not the same as encryption.
Re:DOJ seizes $2.3M in cryptocurrency paid to the ransomware...
by mrkramer on Tuesday June 08, 2021 @06:49AM
(#27433270)
Hashing is for ensuring data integrity and encryption is for protection of data and information I know it but I meant hashing bitcoin private key with some hashing algorithm in order to conceal it.
Re:DOJ seizes $2.3M in cryptocurrency paid to the ransomware...
by mrkramer on Tuesday June 08, 2021 @07:08AM
(#27433497)
Second reply: I saw that you work in applied cryptography and blockchain technology @ Cryptography Services (NCC Group) so you might be familiar with somewhat Grey Hat russian forum InsidePro; back in the day I saw people there requesting Bitcoin private key recovery for their lost private keys or if they encrypted and/or hashed wallet private keys and couldn't recover plaintext anymore and I can say that amateur crackers could recover private keys pretty efficiently and I can only wonder what professional law enforcement agency can do.
If FBI could crack smartphone encryption/protection from multi trillion dollar company I'm speaking about Apple and that terrorist's Iphone then they do pretty much anything.
Re:DOJ seizes $2.3M in cryptocurrency paid to the ransomware...
by nybble41 on Tuesday June 08, 2021 @02:21PM
(#27438872)
> amateur crackers could recover private keys pretty efficiently
That's only if the key was derived from a weak password, which allows it to be brute-forced with standard password scanning techniques. If you're even slightly concerned with security you let a computer generate a fully random key using the proper amount of entropy—preferable on an air-gapped system or an HSM (hardware wallet). No one is going to be "recovering" private keys which were generated and handled securely without a very large budget and physical access to the storage medium.
Re:DOJ seizes $2.3M in cryptocurrency paid to the ransomware...
by dboreham on Tuesday June 08, 2021 @08:31AM
(#27434255)
Can they travel faster than light?