From 935ca82e84735c65ff1eb1f65fba39a28d6e457d Mon Sep 17 00:00:00 2001 From: Jonathan Cross Date: Sat, 4 Feb 2017 20:11:53 +0100 Subject: [PATCH] Response to Eric Voskuil, 2017-01-21 and request for clarification. --- Comments:BIP-0038.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Comments:BIP-0038.md b/Comments:BIP-0038.md index 718cb40..3fb2310 100644 --- a/Comments:BIP-0038.md +++ b/Comments:BIP-0038.md @@ -2,4 +2,6 @@ Designed for single-key "paper wallets", which are not a good idea in general. - I assume this is not meant as a general recommendation against "paper wallets", but rather paper wallets that consist of a single key? If so, is there an equivalent BIP (or discussion) on passphrase-protected HD paper wallets? --Jonathan Cross, 2017-01-17 -The design may have been intended for paper wallets, although there is nothing inherently bad about either a paper wallet or encryption of a single key. I would agree that a "single-key" *wallet* is a bad idea from a privacy perspective, but there are other perfectly "good" scenarios for encryption of a single secret. The are however **significant** security problems with one aspect of BIP38. The issue is documented in detail [here](https://github.com/libbitcoin/libbitcoin/wiki/BIP38-Security-Considerations). --Eric Voskuil, 2017-01-21 \ No newline at end of file +The design may have been intended for paper wallets, although there is nothing inherently bad about either a paper wallet or encryption of a single key. I would agree that a "single-key" *wallet* is a bad idea from a privacy perspective, but there are other perfectly "good" scenarios for encryption of a single secret. The are however **significant** security problems with one aspect of BIP38. The issue is documented in detail [here](https://github.com/libbitcoin/libbitcoin/wiki/BIP38-Security-Considerations). --Eric Voskuil, 2017-01-21 + +Thank you Eric. It seems the security issues only relate to the [Confirmation Code](https://github.com/bitcoin/bips/blob/master/bip-0038.mediawiki#confirmation-code) section, correct? Are there security issues with owner-created, single-use, BIP-38 encrypted key pair when create and printed on a secure platform? --Jonathan Cross, 2017-02-04 \ No newline at end of file