News for hackers. Stuff that matters.
Re:All Bitcoin private keys are on this website by frisco on Tuesday December 21, 2021 @05:49AM (#29636074)
This raises a really interesting question. Though it’s essentially impossible to figure out the key for any given wallet… if you download the blockchain and generate private keys as fast as you can, how often do you find one that has a balance? Will there just be some ongoing very low but decidedly nonzero risk of all of your assets vanishing some day if you’re not using multisig?
Re:All Bitcoin private keys are on this website by lordnacho on Tuesday December 21, 2021 @05:55AM (#29636129)
One thing you can do that's quite lucrative for someone is to generate all the keys corresponding to common dictionary words like "dog" and "cat". The way I know someone is doing this is I was testing some transactions and somehow whatever I was sending was immediately vanishing. So someone out there has taken a dictionary and done this already.
Re:All Bitcoin private keys are on this website by Nextgrid on Tuesday December 21, 2021 @05:54AM (#29636120)
Introducing the Large Bitcoin Collider: https://lbc.cryptoguru.org/about
Re:All Bitcoin private keys are on this website by tromp on Tuesday December 21, 2021 @05:55AM (#29636126)
If you check 1 billion addresses a second, and there are 100 million addresses with a balance, then it would take on average roughly (2^256 / 10^8) * 10^-9 seconds, which is 36717430630808027468154168254911183362909051 billion years.

EDIT: Only 463439129036942 billion years, taking into account that there are effectively only 2^160 addresses.

Re:All Bitcoin private keys are on this website by wruza on Tuesday December 21, 2021 @06:03AM (#29636183)
Now that it looks like a phone number, one could unleash a horde of telemarketers at it.
Re:All Bitcoin private keys are on this website by ben_w on Tuesday December 21, 2021 @07:47AM (#29636842)
Feels like a Hitchhiker’s quote:

"""Coincidentally, 2276709 is also the telephone number of a flat in Islington where Arthur once went to a party, met a nice girl, and lost her to a party-crasher. While the flat and telephone have been demolished along with Earth, they are forever linked to the fact that Arthur Dent and Ford Prefect—against all odds—are rescued 29 seconds after being ejected from the Vogon spaceship."""

Re:All Bitcoin private keys are on this website by terrahashing on Tuesday December 21, 2021 @06:47AM (#29636443)
Hashing hardware capability is typically measured in trillions per second (TH/s) so the math might be better using trillion instead of billion. As I understand it, the rental cost of 1 PH/s (which I think is one-thousand-trillion?) is about $10/hour. From that I think you could work out an actual cost to generate a collision!
Re:All Bitcoin private keys are on this website by ben_w on Tuesday December 21, 2021 @07:55AM (#29636894)
Even taking the smaller value of 463439129036942 billion years at 1 billion/second (and therefore 463439129036942000 years at a quadrillion/second), at $10 / hour / PH/s, that’s $4.06e22, or ≈ 480 million years of Earth’s 2020 global nominal GDP.
Re:All Bitcoin private keys are on this website by zeckalpha on Tuesday December 21, 2021 @07:53AM (#29636879)
This assumes a uniform key space. If PRNGs used to generate keys are biased, then there may be a way to exploit that bias.
Re:All Bitcoin private keys are on this website by john_alan on Tuesday December 21, 2021 @05:57AM (#29636138)
You could shorten that by recognising the address space is more like 2^160 in BTC, due to the address generation process, more than one private key can spend from a given address, technically.
Re:All Bitcoin private keys are on this website by wruza on Tuesday December 21, 2021 @06:01AM (#29636163)
This reduces that number of years by 28 digits, afaiu, and that is still a pretty big number of billions of years.
Re:All Bitcoin private keys are on this website by berkes on Tuesday December 21, 2021 @05:57AM (#29636140)
Is that the average time until the first collision, or the time it will take to generate all possible private keys?
Re:All Bitcoin private keys are on this website by tromp on Tuesday December 21, 2021 @06:01AM (#29636167)
Average time until collision.
Re:All Bitcoin private keys are on this website by frisco on Tuesday December 21, 2021 @06:04AM (#29636188)
You could check a lot more than 1B address per second.
Re:All Bitcoin private keys are on this website by tromp on Tuesday December 21, 2021 @06:12AM (#29636246)
Not easily, as you need to do an elliptic curve point x scalar multiplication, which takes tons of cycles on a CPU and even tons of gates on an ASIC. Please provide a link to hardware that can do it much faster...
Re:All Bitcoin private keys are on this website by rocqua on Tuesday December 21, 2021 @06:35AM (#29636367)
I'd guess a GPU at 2Ghz (2. Billion per second) might run parallel enough to compensate for the number of cycles required for a given point.

I doubt whether this would get far past 1 billion a second though.

Re:All Bitcoin private keys are on this website by jakedata on Tuesday December 21, 2021 @06:32AM (#29636344)
Two or more of whatever you are using to perform the calculations? I mean it won't appreciably shorten the search time but it would double the processing rate.
Re:All Bitcoin private keys are on this website by virtue3 on Tuesday December 21, 2021 @09:35AM (#29637697)
There's kind of a reason you don't count the coefficient in big O notation etc. It doesn't really matter.

If you can't exponentially increase the amount of power / transactions you don't really have a chance of figuring out a collision.

100x machines with a computation that takes 100 billion years is still 1 billion years.

Re:All Bitcoin private keys are on this website by danuker on Tuesday December 21, 2021 @05:52AM (#29636101)
Human-generated brainwallets are notoriously guessable: https://www.reddit.com/r/Bitcoin/comments/1zti1p/17956_hacke...
Re:All Bitcoin private keys are on this website by Ekaros on Tuesday December 21, 2021 @05:58AM (#29636150)
I wonder if you could cut this down by focusing on know implementations and their random number generation. That is trying to figure out if weaker random number generation at any point was prevalent...
Re:All Bitcoin private keys are on this website by spiorf on Tuesday December 21, 2021 @06:12AM (#29636245)
Re:All Bitcoin private keys are on this website by sdan on Tuesday December 21, 2021 @05:53AM (#29636109)
its like asking if you had a rocketship that traveled at the speed of light, how long until you find earth given you're on some random galaxy
Re:All Bitcoin private keys are on this website by andy_ppp on Tuesday December 21, 2021 @06:03AM (#29636179)
Not really because if you are travelling at the speed of light time isn't passing...
Re:All Bitcoin private keys are on this website by quickthrower2 on Tuesday December 21, 2021 @06:51AM (#29636473)
It is for earth though, which might be swallowed up by the sun at the spacetime you arrive.
Re:All Bitcoin private keys are on this website by the_gastropod on Tuesday December 21, 2021 @06:29AM (#29636324)
Not a physicist, but I don’t imagine you can turn while going light speed
Re:All Bitcoin private keys are on this website by dwighttk on Tuesday December 21, 2021 @06:42AM (#29636410)
I can do whatever I want, I’m going light speed!
Re:All Bitcoin private keys are on this website by sdan on Tuesday December 21, 2021 @06:24AM (#29636295)
does that technical mistake hinder the point of my comment?
Re:All Bitcoin private keys are on this website by csomar on Tuesday December 21, 2021 @06:41AM (#29636407)
Yes. You can't, technically, find earth while passing in speed of light. If you are travelling in light-speed, you'll reach destination in no time.
Re:All Bitcoin private keys are on this website by ithinkso on Tuesday December 21, 2021 @05:54AM (#29636118)
Miniscule, not zero of course but zero for any practical purpose. The search space is just that much bigger.
Re:All Bitcoin private keys are on this website by magma1983 on Tuesday December 21, 2021 @05:52AM (#29636100)
With every supercomputer working for 100 years, you can have 0.01% of all accounts, maybe.
Re:All Bitcoin private keys are on this website by Tuna-Fish on Tuesday December 21, 2021 @06:01AM (#29636166)
... not even close.

2^256 is a very large number. If you could build a computer that required a single atom, and could test the balance of a single account in a single nanosecond, and then converted the entirety of the earth into such computers, it would take ~2.8 million years for you to check 0.01% of all accounts.

Brute-forcing modern cryptography isn't something that can happen. The magnitude of 2^256 is close to the count of atoms in the entire observable universe.

Re:All Bitcoin private keys are on this website by chokma on Tuesday December 21, 2021 @07:06AM (#29636569)
The best quote for this is from Bruce Schneier:

"... brute-force attacks against 256-bit keys will be infeasible until computers are built from something other than matter and occupy something other than space."

https://security.stackexchange.com/a/82412

Re:All Bitcoin private keys are on this website by 5e92cb50239222b on Tuesday December 21, 2021 @06:30AM (#29636331)
> The magnitude of 2^256 is close to the count of atoms in the entire observable universe.

I've always heard that even 2¹²⁸ is significantly larger than that number (which is closer to 2⁸⁰). This page seems to support that:

https://en.wikipedia.org/wiki/Observable_universe#Matter_con...

Re:All Bitcoin private keys are on this website by codeflo on Tuesday December 21, 2021 @06:52AM (#29636482)
Look more carefully, the estimation according to Wikipedia is 10^80, which is roughly 2^266.

(BTW, when converting 10^x to 2^x, times 3 is what I use for very rough back of the envelope estimations. Times 10/3 is actually almost precise, as log2(10) = 3.32…)

Re:All Bitcoin private keys are on this website by 5e92cb50239222b on Tuesday December 21, 2021 @07:16AM (#29636626)
Ah, so it's just me being stupid, as usual. Thanks, at least now I know.
Re:All Bitcoin private keys are on this website by FabHK on Tuesday December 21, 2021 @10:11AM (#29638082)
> log2(10) = 3.32

or, to put it in simpler terms,

10^3 = 1000 ≈ 1024 = 2^10

Re:All Bitcoin private keys are on this website by V1ndaar on Tuesday December 21, 2021 @06:40AM (#29636401)
Nope, the rough approximation of atoms in the universe is O(10^80). Big difference!
Re:All Bitcoin private keys are on this website by rvense on Tuesday December 21, 2021 @07:01AM (#29636531)
Quickly checking with Python...

2^265 < 10^80 > 2^266

So it's only 0.1% of the number of atoms in the universe?

Re:All Bitcoin private keys are on this website by codeflo on Tuesday December 21, 2021 @07:22AM (#29636665)
“Only”.
Re:All Bitcoin private keys are on this website by edf13 on Tuesday December 21, 2021 @08:31AM (#29637164)
It's a large number but not close to the count of atom:

https://www.wolframalpha.com/input/?i=2%5E256 > ≈ 0.0012 × the number of atoms in the visible universe (≈ 10^80)

Re:All Bitcoin private keys are on this website by formerly_proven on Tuesday December 21, 2021 @06:27AM (#29636315)
This reminds me of a discussion a few years ago where someone was extremely adamant that you'd have to handle the chance of a key collision in a random 256-bit key for the system to be secure :)
Re:All Bitcoin private keys are on this website by rocqua on Tuesday December 21, 2021 @06:39AM (#29636392)
I might agree with them because your random process could be weaker than you think without having any indication until you hit the colision.

Anything past detection and panicking might be overkill tho.