最近中文社区EOS钱包比较多,但安全问题也比较多。大家对助记词的理解也不一样,本文试图回答这样的问题:作为钱包的软件提供方,如何正确的使用助记词?分解为几个问题,并给出作者的观点。 问题1:使用助记词是不安全的吗?答:这是一个误解,钱包软件需要使用[BIP39](https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki)随机生成一个高强度的助记词(并且让用户使用 **纸笔** 记录),而不能让用户随便指定助记词。 问题2:如何生成助记词?答:使用BIP39。 问题3:助记词如何生成私钥? 答:在符合[BIP32](https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki)的基础上,应使用 [SLIP48](https://github.com/satoshilabs/slips/blob/master/slip-0048.md) 。BIP32应该没有争议,而SLIP48在中文社区有争议,但笔者认为, SLIP48是最好的选择。原因如下:首先,[BIP44](https://github.com/bitcoin/bips/blob/master/bip-0044.mediawiki) 压根就是给比特币准备的,比特币的特点并不适合石墨烯系列区块链( 参考 [笔者的博文](https://blog.xiaofuxing.name/2018/07/13/graphene_account_features.html) ) 。 其次, SLIP48 是为石墨烯区块链专门设计的路径规范,很好的和石墨烯的帐号体系融合在一起。目前笔者没有发现社区有更好的路径规范了,因此 SLIP48是最好的选择。 问题4:不同角色的私钥(owner、active)需要不同的助记词?答:显然不需要。如果是这样,钱包要么不遵守 BIP32 , 要么使用了不合适石墨烯的BIP44,加重了用户的记忆负担。事实上,一个助记词不仅能够生成一个帐号的所有角色的私钥,还能管理同一个区块链的很多帐号,还能管理多个区块链的不同帐号:这是HD(分层确定性,由BIP32定义)钱包本来就应该实现的功能。 以上是笔者的观点,欢迎留言和我讨论。
author | pluswave |
---|---|
permlink | eos |
category | eos |
json_metadata | {"tags":["eos","bitshares","cryptocurrency"],"links":["https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki","https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki","https://github.com/satoshilabs/slips/blob/master/slip-0048.md","https://github.com/bitcoin/bips/blob/master/bip-0044.mediawiki","https://blog.xiaofuxing.name/2018/07/13/graphene_account_features.html"],"app":"steemit/0.1","format":"markdown"} |
created | 2018-07-13 13:18:54 |
last_update | 2018-07-13 13:36:39 |
depth | 0 |
children | 1 |
last_payout | 2018-07-20 13:18:54 |
cashout_time | 1969-12-31 23:59:59 |
total_payout_value | 0.052 HBD |
curator_payout_value | 0.006 HBD |
pending_payout_value | 0.000 HBD |
promoted | 0.000 HBD |
body_length | 979 |
author_reputation | 373,093,235,961 |
root_title | EOS钱包:如何正确的使用助记词生成私钥 |
beneficiaries | [] |
max_accepted_payout | 1,000,000.000 HBD |
percent_hbd | 10,000 |
post_id | 64,533,479 |
net_rshares | 26,085,387,573 |
author_curate_reward | "" |
voter | weight | wgt% | rshares | pct | time |
---|---|---|---|---|---|
pluswave | 0 | 3,504,211,100 | 100% | ||
thetroublenotes | 0 | 332,925,265 | 2% | ||
marketstack | 0 | 9,453,115,005 | 1.49% | ||
lionindayard | 0 | 3,161,238,664 | 1.49% | ||
dick.sledge | 0 | 9,633,897,539 | 1.49% |
Congratulations @pluswave! You received a personal award! <table><tr><td>https://steemitimages.com/70x70/http://steemitboard.com/@pluswave/birthday2.png</td><td>Happy Birthday! - You are on the Steem blockchain for 2 years!</td></tr></table> <sub>_You can view [your badges on your Steem Board](https://steemitboard.com/@pluswave) and compare to others on the [Steem Ranking](http://steemitboard.com/ranking/index.php?name=pluswave)_</sub> **Do not miss the last post from @steemitboard:** <table><tr><td><a href="https://steemit.com/carnival/@steemitboard/carnival-challenge-here-are-the-winners"><img src="https://steemitimages.com/64x128/http://i.cubeupload.com/rltzHT.png"></a></td><td><a href="https://steemit.com/carnival/@steemitboard/carnival-challenge-here-are-the-winners">Carnival Challenge - Here are the winners</a></td></tr></table> ###### [Vote for @Steemitboard as a witness](https://v2.steemconnect.com/sign/account-witness-vote?witness=steemitboard&approve=1) to get one more award and increased upvotes!
author | steemitboard |
---|---|
permlink | steemitboard-notify-pluswave-20190321t154611000z |
category | eos |
json_metadata | {"image":["https://steemitboard.com/img/notify.png"]} |
created | 2019-03-21 15:46:12 |
last_update | 2019-03-21 15:46:12 |
depth | 1 |
children | 0 |
last_payout | 2019-03-28 15:46:12 |
cashout_time | 1969-12-31 23:59:59 |
total_payout_value | 0.000 HBD |
curator_payout_value | 0.000 HBD |
pending_payout_value | 0.000 HBD |
promoted | 0.000 HBD |
body_length | 1,027 |
author_reputation | 38,975,615,169,260 |
root_title | EOS钱包:如何正确的使用助记词生成私钥 |
beneficiaries | [] |
max_accepted_payout | 1,000,000.000 HBD |
percent_hbd | 10,000 |
post_id | 81,685,664 |
net_rshares | 0 |