nach oben

Erschienen in:

2020 | OriginalPaper | Buchkapitel

Arcula: A Secure Hierarchical Deterministic Wallet for Multi-asset Blockchains

verfasst von : Adriano Di Luzio, Danilo Francati, Giuseppe Ateniese

Erschienen in: Cryptology and Network Security

Verlag: Springer International Publishing

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

This work presents Arcula, a new design for hierarchical deterministic wallets that brings identity-based public keys to the blockchain. Arcula is built on top of provably secure cryptographic primitives. It generates all its cryptographic secrets from a user-provided seed and enables the derivation of new public keys based on the identities of users, without requiring any secret information. Unlike other wallets, it achieves all these properties while being secure against privilege escalation. We formalize the security model of hierarchical deterministic wallets and prove that an attacker compromising an arbitrary number of users within an Arcula wallet cannot escalate his privileges and compromise users higher in the access hierarchy. Our design works out-of-the-box with any blockchain that enables the verification of signatures on arbitrary messages. We evaluate its usage in a real-world scenario on the Bitcoin Cash network.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel Revisiting ECM on GPUs

Nächstes Kapitel Detecting Covert Cryptomining Using HPC

Arcula is the Latin word to define the small casket where ancient Romans used to store their jewels.

In general, the administrator of the wallet is the highest privileged user in the hierarchy.

The value

https://static-content.springer.com/image/chp%3A10.1007%2F978-3-030-65411-5_16/495546_1_En_16_IEq238_HTML.gif

is the public label (binary string) associated by the DHKA to the node

https://static-content.springer.com/image/chp%3A10.1007%2F978-3-030-65411-5_16/495546_1_En_16_IEq239_HTML.gif

. Without loss of generality we can assume that

https://static-content.springer.com/image/chp%3A10.1007%2F978-3-030-65411-5_16/495546_1_En_16_IEq240_HTML.gif

(the public label

https://static-content.springer.com/image/chp%3A10.1007%2F978-3-030-65411-5_16/495546_1_En_16_IEq241_HTML.gif

is just the node number

https://static-content.springer.com/image/chp%3A10.1007%2F978-3-030-65411-5_16/495546_1_En_16_IEq242_HTML.gif

Available at https://github.com/aldur/Arcula.

Another advantage of P2SH is that it hides the details of the locking script until the users redeem the coins sent by the transaction.

The transcripts of the transactions are available, respectively, at https://bit.ly/2UI62tt and https://bit.ly/2UoQNGI.

The sanitizable keys can be hierarchically deployed by leveraging a second instance of DHKA.

Andresen, G.: BIP16: pay to script hash (2012). https://github.com/bitcoin/bips/blob/master/bip-0016.mediawiki. Accessed 9 Nov 2020

Atallah, M.J., Blanton, M., Fazio, N., Frikken, K.B.: Dynamic and efficient key management for access hierarchies. ACM Trans. Inf. Syst. Secur. (TISSEC) 12(3), 1–43 (2009)CrossRef

Ateniese, Giuseppe., Chou, Daniel H., de Medeiros, Breno, Tsudik, Gene: Sanitizable signatures. In: di Vimercati, Sabrina de Capitani, Syverson, Paul, Gollmann, Dieter (eds.) ESORICS 2005. LNCS, vol. 3679, pp. 159–177. Springer, Heidelberg (2005). https://doi.org/10.1007/11555827_10CrossRef

Buterin, V.: Deterministic wallets, their advantages and their understated flaws (2013). https://bitcoinmagazine.com/articles/deterministic-wallets-advantages-flaw-1385450276/. Accessed 9 Nov 2020

Courtois, N.T., Valsorda, F., Emirdag, P.: Private key recovery combination attacks: on extreme fragility of popular bitcoin key management, wallet and cold storage solutions in presence of poor RNG events (2014)

Das, P., Faust, S., Loss, J.: A formal treatment of deterministic wallets. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, pp. 651–668 (2019)

De Santis, A., Ferrara, A.L., Masucci, B.: New constructions for provably-secure time-bound hierarchical key assignment schemes. Theor. Comput. Sci. 407(1–3), 213–230 (2008)MathSciNetCrossRefMATH

Di Luzio, A., Francati, D., Ateniese, G.: Arcula: A secure hierarchical deterministic wallet for multi-asset blockchains. arXiv preprint arXiv:1906.05919 (2019)

Dikshit, P., Singh, K.: Efficient weighted threshold ECDSA for securing bitcoin wallet. In: 2017 ISEA Asia Security and Privacy (ISEASP), pp. 1–9. IEEE (2017)

10.

Fan, Chun-I., Tseng, Yi-Fan., Su, Hui-Po., Hsu, Ruei-Hau, Kikuchi, Hiroaki: Secure hierarchical bitcoin wallet scheme against privilege escalation attacks. Int. J. Inf. Secur. 19(3), 1–11 (2019). https://doi.org/10.1007/s10207-019-00476-5CrossRef

11.

Gennaro, Rosario., Goldfeder, Steven, Narayanan, Arvind: Threshold-optimal DSA/ECDSA signatures and an application to bitcoin wallet security. In: Manulis, Mark, Sadeghi, Ahmad-Reza, Schneider, Steve (eds.) ACNS 2016. LNCS, vol. 9696, pp. 156–174. Springer, Cham (2016). https://doi.org/10.1007/978-3-319-39555-5_9CrossRefMATH

12.

Goldfeder, S., et al.: Securing bitcoin wallets via a new DSA/ECDSA threshold signature scheme (2015)

13.

Gutoski, Gus, Stebila, Douglas: Hierarchical deterministic bitcoin wallets that tolerate key leakage. In: Böhme, Rainer, Okamoto, Tatsuaki (eds.) FC 2015. LNCS, vol. 8975, pp. 497–504. Springer, Heidelberg (2015). https://doi.org/10.1007/978-3-662-47854-7_31CrossRef

14.

Palatinus, M., Rusnak, P.: BIP43: purpose field for deterministic wallets (2014). https://github.com/bitcoin/bips/blob/master/bip-0043.mediawiki. Accessed 9 Nov 2020

15.

Palatinus, M., Rusnak, P.: BIP44: multi-account hierarchy for deterministic wallets (2014). https://github.com/bitcoin/bips/blob/master/bip-0044.mediawiki. Accessed 9 Nov 2020

16.

Palatinus, M., Rusnak, P., Voisine, A., Bowe, S.: BIP39: Mnemonic code for generating deterministic keys (2013). https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki. Accessed 9 Nov 2020

17.

Wuille, P.: BIP32: Hierarchical deterministic wallets (2012). https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki. Accessed 9 Nov 2020

Titel: Arcula: A Secure Hierarchical Deterministic Wallet for Multi-asset Blockchains
verfasst von: Adriano Di Luzio
Danilo Francati
Giuseppe Ateniese
Verlag: Springer International Publishing
Buch: Cryptology and Network Security
Print ISBN: 978-3-030-65410-8

Electronic ISBN: 978-3-030-65411-5

Copyright-Jahr: 2020
DOI: https://doi.org/10.1007/978-3-030-65411-5_16

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"