Abstract—

This article discusses the security of implementing encryption for the Bitcoin Core cryptocurrency wallet. Particular attention is paid to aspects of the practical use of cryptographic algorithms when encrypting the wallet.dat file with a password. Practical resistance to brute-force attacks using parallel computing on GPUs is also considered. It is discovered that Bitcoin Core does not implement changing the encryption key for the user’s private keys. This implementation makes it possible to carry out a second attack on the wallet without knowing the new password, if it has already been compromised previously. Changes to encryption algorithms are also been proposed to make brute-force attacks more difficult on the GPU.

中文翻译：

---

比特币核心加密钱包的密码保护分析

摘要-

本文讨论了为 Bitcoin Core 加密货币钱包实施加密的安全性。使用密码加密 wallet.dat 文件时，要特别注意加密算法的实际使用方面。还考虑了在 GPU 上使用并行计算来实际抵抗暴力攻击。发现Bitcoin Core并没有实现更改用户私钥的加密密钥。如果钱包之前已经被泄露，这种实现使得在不知道新密码的情况下对钱包进行第二次攻击成为可能。还提议对加密算法进行更改，以使 GPU 上的暴力攻击更加困难。