search

pointbiz / bitaddress.org

JavaScript Client-Side Bitcoin Wallet Generator
https://www.bitaddress.org
2.44k stars 1.5k forks source link

BIP38 encryption allowed empty passphrase in 2013 version of site #170

Open simonohanlon101 opened 6 years ago

simonohanlon101 commented 6 years ago

Hi, I've noticed using an old version of the site (Nov 2nd 2013 snapshot from the Internet Archive Wayback Machine: ) that it was possible to produce BIP38 encrypted addresses whilst supplying an empty passphrase.

You cannot however decrypt the generated private key the wallet details tab without supplying a passphrase. e.g. the public address 1PkcV18zdvdHHr3xPUzH3Yd2Hg5HBB8L7E with an encrypted private key of: 6PfNhoGkGtxRNGmVgZpruHmJRei2Rrrw4q9GjCCfVsKbapi9vU3gjyLKAR

was generated in such a way. How do I decrypt this?

This is important to me because I believe that I (along with maybe others) may have inadvertently produced an encrypted address this way.

Many thanks

pointbiz commented 6 years ago

I fork can be made to allow you to decrypt with an empty passphrase.