The Bitcoin Brain Drain: Examining the Use and Abuse of Bitcoin Brain Wallets
The Bitcoin Brain Drain: Examining the Use and Abuse of Bitcoin Brain Wallets
复制标题
比特币人才流失：检查比特币人才钱包的使用和滥用
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
T. Moore
中科院分区：
文献类型：
--
作者：
Marie Vasek;Joseph Bonneau;R. Castellucci;C. Keith;T. Moore
在加密货币的比特币中，用户可以确定用于从密码传输资金的私钥，因为他们可以使用户无法将其私有钥匙存储在不受信任的计算机上。密码猜测。我们评估了大约3000亿个密码。几分钟之内。装有更多比特币的大脑钱包选择更强的密码，但是我们确实发现，密码较弱的大脑钱包更快地破裂了。
In the cryptocurrency Bitcoin, users can deterministically derive the private keys used for transmitting money from a password. Such “brain wallets” are appealing because they free users from storing their private keys on untrusted computers. Unfortunately, they also enable attackers to conduct unlimited offline password guessing. In this paper, we report on the first large-scale measurement of the use of brain wallets in Bitcoin. Using a wide range of word lists, we evaluated around 300 billion passwords. Surprisingly, after excluding activities by researchers, we identified just 884 brain wallets worth around $100K in use from September 2011 to August 2015. We find that all but 21 wallets were drained, usually within 24 h but often within minutes. We find that around a dozen “drainers” are competing to liquidate brain wallets as soon as they are funded. We find no evidence that users of brain wallets loaded with more bitcoin select stronger passwords, but we do find that brain wallets with weaker passwords are cracked more quickly.