@@ -74,6 +74,8 @@ For the checksums we use the leftmost 16 bits of a SHA-256 hash digest of the re
...
@@ -74,6 +74,8 @@ For the checksums we use the leftmost 16 bits of a SHA-256 hash digest of the re
When enough M secrets are provided the master secret is reconstructed. To allow an additional protection of the final seed using a passphrase we suggest a following scenario. The passphrase is stretched using a key derivation function. Output is used as an encryption key passed to a symmetric-key cipher. The result of this encryption is the final seed to be used. If no passphrase is provided the passphrase is set to an empty string.
When enough M secrets are provided the master secret is reconstructed. To allow an additional protection of the final seed using a passphrase we suggest a following scenario. The passphrase is stretched using a key derivation function. Output is used as an encryption key passed to a symmetric-key cipher. The result of this encryption is the final seed to be used. If no passphrase is provided the passphrase is set to an empty string.
Passphrase should only contain ASCII characters to achieve best interoperability among various operating systems and wallet implementations.
This mechanism is intentionally symmetric to allow reconstructing the master secret from the seed in case the passphrase is known.
This mechanism is intentionally symmetric to allow reconstructing the master secret from the seed in case the passphrase is known.
