random

Bitcoin

Wallets are designed in such a way that a simple dozen words can be used to reconstruct thousands of addresses. But how? 
Wallet BIP-32 
<div class="my-4"> 
 <div class="ads " data-page-type="" data-location="1"> 
 </div> 
</div> 
Wallet HD stands for Hierarchical and Deterministic. These wallets use a single protocol to create addresses from seed. 
Behind each address is a public key. It’s important to keep this in mind. An address is just an encoding of a public key. It’s all the same. 
This concept of deterministic key derivation was introduced by Peter Wuille in <a href="https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki" target="_blank" rel="noopener noreferrer nofollow">BIP-32</a>. In simple terms, the same seed will always produce the same private/public key pairs. 
So a single seed is enough to restore dozens or hundreds of key pairs to which your BTCs are linked. Or even millions, in the case of an exchange. 
Before going any further, it should be noted that a wallet can function perfectly well with a single pair of keys. The problem is the loss of confidentiality. So it’s best to create a new address (a new key pair) for each transaction. 
<h2 id="h-deriving-keys-from-the-seed">Deriving keys from the seed</h2> 
Here’s how the original seed is created. It all starts with the generation of an “entropy”, which is a random number of 128, 256 or 512 bits. 
Let’s take the 128-bit entropy we previously used: 
0 0 0 0 0 1 1 0 1 1 0 0 1 0 0 1 1 0 0 0 1 0 0 1 0 0 1 1 0 1 0 1 1 1 1 0 1 0 1 1 1 1 0 1 0 1 1 1 0 1 0 0 1 0 1 0 0 0 1 1 0 0 0 0 1 1 0 1 0 1 0 1 0 1 1 0 0 0 1 1 1 1 1 0 0 1 1 1 1 0 0 1 0 1 0 0 1 1 0 0 1 0 0 1 1 0 0 0 1 0 0 1 1 1 0 1 1 0 0 0 1 1 1 0 0 0 0 1 
<div class="my-4"> 
 <div class="ads " data-page-type="" data-location="2"> 
 </div> 
</div> 
This number is randomly generated and expressed above in binary (base 2). Which, incidentally, corresponds to the number (9,021,802,605,472,555,840,788,517,848,795,437,281) in the decimal system (base 10). 
This entropy is used to create the mnemonic phrase (the 12 words), which in our case will be : 
Allow Equip essence Stuff Innocent Blue Fever Lamp Net Equip Invite Second 
The mnemonic phrase is then converted into a hash using the HMAC-SHA-512 hash function. This hash is the famous 512-bit seed : 
b8485829b0151585b9c24ba336811b7274c08d0d44380028f01f7d7e5e5c2e26811cef5b44c9785ffae7341ed8ec6f079a77829136b148b72b73f70ea7d31c02 
The seed is expressed here in hexadecimal rather than bits, so as not to take up too much space. 
This seed is then split in two to create the Master Private Key (m) and the main string code (c). 
The 256 bits on the left act as the Master Private Key: 
b8485829b0151585b9c24ba336811b7274c08d0d44380028f01f7d7e5e5c2e26 
The 256 bits on the right are the very first string code: 
811cef5b44c9785ffae7341ed8ec6f079a77829136b148b72b73f70ea7d31c02 
Simple, isn’t it? Here’s an illustration: 
<div class="wp-block-image"> 
 <figure class="aligncenter size-large is-resized"> 
 <img decoding="async" src="https://www.cointribune.com/app/uploads/2023/08/CTB-Logo2-1024x683.png" alt="HD wallet" class="wp-image-622356" width="600" srcset="https://www.cointribune.com/app/uploads/2023/08/CTB-Logo2-1024x683.png 1024w, https://www.cointribune.com/app/uploads/2023/08/CTB-Logo2-300x200.png 300w, https://www.cointribune.com/app/uploads/2023/08/CTB-Logo2-768x512.png 768w, https://www.cointribune.com/app/uploads/2023/08/CTB-Logo2.png 1200w" sizes="(max-width: 1024px) 100vw, 1024px"> 
 <figcaption class="wp-element-caption">
 Source: Mastering Bitcoin by Andreas Antonopoulos (<a href="https://github.com/bitcoinbook/bitcoinbook/blob/develop/ch05.asciidoc" target="_blank" rel="noopener noreferrer nofollow">Github</a>) 
 </figcaption> 
 </figure> 
</div> 
The master private key (m) is then used to generate a corresponding master public key (M) using elliptic curve cryptography. This part is less obvious, but we’ll explain it shortly. 
The other key pairs are then created in the same way. Except that, instead of starting with the seed, we start with the “extended public key” (or “Xpub” in the jargon). 
This extended public key combines : 
<ul> 
 <li>The master public key</li> 
 <li>An index number. The first derived key will have index number 0, the second index number 1, and so on.</li> 
 <li>The string code.</li> 
</ul> 
Example of an extended key: 
xprv9v3zEm9W9QhLnMUEG9BkmpmGAf96uXh5NLMsdLWCVLur1fj26MY5ZjcXrb2aBF4U6uhzzs7Vw9jGopHxBYjsSmgozFBakbGiBgffGH 
These three pieces of information put together form an “extended” public key, which will again be hashed by HMAC-SHA-512. The resulting hash will again be split into two 256-bit halves, one forming the daughter private key and the other a new string code. 
By modifying the index, it is possible to extend the number of daughter keys 1,2,3, and so on. Each extended key can generate more than two billion daughter keys. And therefore as many bitcoin addresses. 
And each daughter key can be used to create an extended key from which a new series of daughter keys (a new branch) can be derived: 
<div class="wp-block-image"> 
 <figure class="aligncenter size-large is-resized"> 
 <img decoding="async" src="https://www.cointribune.com/app/uploads/2023/08/CTB-Logo3-1024x683.png" alt="wallet HD" class="wp-image-622360" width="600" srcset="https://www.cointribune.com/app/uploads/2023/08/CTB-Logo3-1024x683.png 1024w, https://www.cointribune.com/app/uploads/2023/08/CTB-Logo3-300x200.png 300w, https://www.cointribune.com/app/uploads/2023/08/CTB-Logo3-768x512.png 768w, https://www.cointribune.com/app/uploads/2023/08/CTB-Logo3.png 1200w" sizes="(max-width: 1024px) 100vw, 1024px"> 
 </figure> 
</div> 
That’s why BIP-32 lets you recover all your bitcoins with just a dozen words. 
And since all wallets have adopted this protocol, you can also change wallet like shirt with the same seed.

Bitcoin – How to derive the keys from the twelve words?

Table of Contents

Cointribune EN

Other articles published on Aug 2, 2023

Billions of SHIB Shifted by Whales as Shiba Inu Awaits Next Big Thing

FLOKI Price Analysis: Bullish Influence Over FLOKI Range Hints At A Breakout Rally To $0.000030!

Investors’ Dilemma: Choosing Between Shiba Inu and Alex The Doge

Chinese central bank weighs in to help Argentina avoid default to IMF

Présidentielles US : Ron DeSantis promet de mettre fin à la «guerre de Biden contre Bitcoin» et l...

Machine learning algorithm sets Terra Classic price for end of August 2023

Join our free newsletter for daily crypto updates!