11 votes

Does the Monero daemon and wallet connect with other nodes by ssl or unencrypted?

From my knowledge the connection is not encrypted, but this doesn't hurt anything because the data that is exchanged is already public record. For example: the same information can also be found on ...
user avatar
  • 346
10 votes
Accepted

What encryption algorithm is used for the wallet.keys file?

ChaCha8; the key derivation is done with CryptoNight. https://github.com/monero-project/monero/blob/e06530e2d97a0a44f1f954b0d9a49e522e2ca74a/src/wallet/wallet2.cpp#L1362 Specifically note L1429 which ...
user avatar
  • 2,422
7 votes
Accepted

Cloud storing wallet.keys encrypted files

Your wallet.keys file should be perfectly safe in the cloud as long as your passphrase to unlock it remains secure. You are correct about the use of Chacha8 to protect the file. As long as the file ...
user avatar
  • 1,010
3 votes
Accepted

Explanation of how exactly the pederson commitments in monero work?

Blinding factors are random numbers that are only used once per commitment. No two commitments should ever share the same blinding factor, even if they're for the same amount. The blinding factor is ...
user avatar
  • 8,398
3 votes
Accepted

Official encrypted wallet generator

The scheme from the site is a good one and it won't be lost if you don't lose it :) But anyways, it's fairly simple to remember: hash the passphrase with CryptoNight and EC add it to the original ...
user avatar
  • 19.8k
3 votes

What is "aes_round" in the Monero hashing algorithm?

An AES round uses the three functions (SubBytes, ShiftRows and MixColumns). The Wikipedia article on AES has a high-level description of the algorithm and links to the AES standard, reference source ...
user avatar
  • 3,304
3 votes
Accepted

What is novault and what is its connection to Monero?

According to its GitHub description: novault is a command-line utility and Python module for generating passwords and cryptocurrency wallets from a combination of a description and a master ...
user avatar
  • 4,546
3 votes
Accepted

Are there certain characters unsuitable for passwords?

There are no forbidden characters. However, you might have difficulty with characters such as \r and \n, since they're interpreted as "I'm done" when you type a string, and as terminator when reading ...
user avatar
  • 34.6k
3 votes

What are the risks/benefits of mining on a pool using SSL/TLS encryption vs mining on pools with non-encrypted connections?

It's less about the security of the data moving across the connection than about the authentication of the remote server. When you have the TLS fingerprint for the pool server set up in your miner ...
user avatar
2 votes
Accepted

Why isn't communication between wallet and daemon encrypted?

I'm not qualified to answer this but I'll provide this in answer in the hopes that someone more qualified will step in. There is no reason why you shouldn't connect to a remote node, but any node you ...
user avatar
2 votes
Accepted

Reading Signed/unsigned tx files

Credit to @JollyMort the python base64 module can encode/decode the unsigned_tx file into ascii for transmission via QR code: import base64 ... ... with open(args.infile, "rb") as source: with ...
user avatar
2 votes

Is the communication between wallet and remote node encrypted?

No, the wallet does not provide the remote node with the view keys. I think you are confusing this with the web wallet MyMonero which requires the view key. The only thing that the remote node will ...
user avatar
  • 1,016
1 vote
Accepted

Encrypt and decrypt seed algorithms in Python

Which one is the method currently being used in the reference wallet? The current reference is as follows (and what is commented as the "CN Add" method). Once you have the seed bytes from ...
user avatar
  • 17.4k
1 vote

Does Monero still use chacha for wallet encryption?

The wallet cache uses chacha20 for cache encryption. The KDF used is still the original Cryptonight (one round by default, overridable with --kdf-rounds).
user avatar
  • 34.6k
1 vote

Is the connection over Tor between client and remote node safe?

Your wallet password is local to the wallet. It's not sent to the daemon, which never gets hold of that, nor the wallet keys. Using Tor, information is encrypted between your own tor daemon (though if ...
user avatar
  • 34.6k
1 vote

SSL usage in Sumokoin/Monero

The SSL code you refer to is only used by the Sumokoin Android wallet. It's not hooked anywhere else yet and I'm not aware of any plans to do so. Source: I made that change
user avatar
1 vote
Accepted

SSL usage in Sumokoin/Monero

Monero does not implement SSL in the RPC but it's super simple to enable if you really want to open up a remote node with encrypted communication. Some options are: Connect via an SSH tunnel Proxy ...
user avatar
  • 17.4k
1 vote

Is the communication between wallet and remote node encrypted?

While secret keys are never sent to the daemon, link encryption depends on the two ends. By default, opportunistic encryption will be done, but either side can specifically disable encryption or ...
user avatar
  • 34.6k
1 vote
Accepted

How are wallet passwords stored?

Wallet passwords are never stored on your computer. They're used at the time of input to derive the encryption key which is then used to decrypt your actual wallet data. Deriving the key from the ...
user avatar
  • 19.8k

Only top scored, non community-wiki answers of a minimum length are eligible