11
votes
Does the Monero daemon and wallet connect with other nodes by ssl or unencrypted?
From my knowledge the connection is not encrypted, but this doesn't hurt anything because the data that is exchanged is already public record.
For example: the same information can also be found on ...
- 346
10
votes
Accepted
What encryption algorithm is used for the wallet.keys file?
ChaCha8; the key derivation is done with CryptoNight.
https://github.com/monero-project/monero/blob/e06530e2d97a0a44f1f954b0d9a49e522e2ca74a/src/wallet/wallet2.cpp#L1362
Specifically note L1429 which ...
- 2,452
7
votes
Accepted
Cloud storing wallet.keys encrypted files
Your wallet.keys file should be perfectly safe in the cloud as long as your passphrase to unlock it remains secure.
You are correct about the use of Chacha8 to protect the file.
As long as the file ...
- 1,010
3
votes
Accepted
Explanation of how exactly the pederson commitments in monero work?
Blinding factors are random numbers that are only used once per commitment. No two commitments should ever share the same blinding factor, even if they're for the same amount. The blinding factor is ...
- 8,448
3
votes
Accepted
Official encrypted wallet generator
The scheme from the site is a good one and it won't be lost if you don't lose it :)
But anyways, it's fairly simple to remember: hash the passphrase with CryptoNight and EC add it to the original ...
- 19.9k
3
votes
What is "aes_round" in the Monero hashing algorithm?
An AES round uses the three functions (SubBytes, ShiftRows and MixColumns).
The Wikipedia article on AES has a high-level description of the algorithm and links to the AES standard, reference source ...
- 3,334
3
votes
Accepted
What is novault and what is its connection to Monero?
According to its GitHub description:
novault is a command-line utility and Python module for generating passwords and cryptocurrency wallets from a combination of a description and a master ...
- 4,566
3
votes
Accepted
Are there certain characters unsuitable for passwords?
There are no forbidden characters. However, you might have difficulty with characters such as \r and \n, since they're interpreted as "I'm done" when you type a string, and as terminator when reading ...
- 34.8k
3
votes
What are the risks/benefits of mining on a pool using SSL/TLS encryption vs mining on pools with non-encrypted connections?
It's less about the security of the data moving across the connection than about the authentication of the remote server. When you have the TLS fingerprint for the pool server set up in your miner ...
2
votes
Accepted
Why isn't communication between wallet and daemon encrypted?
I'm not qualified to answer this but I'll provide this in answer in the hopes that someone more qualified will step in. There is no reason why you shouldn't connect to a remote node, but any node you ...
2
votes
Accepted
Reading Signed/unsigned tx files
Credit to @JollyMort
the python base64 module can encode/decode the unsigned_tx file into ascii for transmission via QR code:
import base64
...
...
with open(args.infile, "rb") as source:
with ...
- 139
2
votes
Is the communication between wallet and remote node encrypted?
No, the wallet does not provide the remote node with the view keys. I think you are confusing this with the web wallet MyMonero which requires the view key.
The only thing that the remote node will ...
- 1,026
1
vote
Accepted
Encrypt and decrypt seed algorithms in Python
Which one is the method currently being used in the reference wallet?
The current reference is as follows (and what is commented as the "CN Add" method).
Once you have the seed bytes from ...
- 18.9k
1
vote
Does Monero still use chacha for wallet encryption?
The wallet cache uses chacha20 for cache encryption. The KDF used is still the original Cryptonight (one round by default, overridable with --kdf-rounds).
- 34.8k
1
vote
Is the connection over Tor between client and remote node safe?
Your wallet password is local to the wallet. It's not sent to the daemon, which never gets hold of that, nor the wallet keys. Using Tor, information is encrypted between your own tor daemon (though if ...
- 34.8k
1
vote
SSL usage in Sumokoin/Monero
The SSL code you refer to is only used by the Sumokoin Android wallet. It's not hooked anywhere else yet and I'm not aware of any plans to do so.
Source: I made that change
- 11
1
vote
Accepted
SSL usage in Sumokoin/Monero
Monero does not implement SSL in the RPC but it's super simple to enable if you really want to open up a remote node with encrypted communication.
Some options are:
Connect via an SSH tunnel
Proxy ...
- 18.9k
1
vote
Is the communication between wallet and remote node encrypted?
While secret keys are never sent to the daemon, link encryption depends on the two ends. By default, opportunistic encryption will be done, but either side can specifically disable encryption or ...
- 34.8k
1
vote
Accepted
How are wallet passwords stored?
Wallet passwords are never stored on your computer. They're used at the time of input to derive the encryption key which is then used to decrypt your actual wallet data.
Deriving the key from the ...
- 19.9k
Only top scored, non community-wiki answers of a minimum length are eligible