One Key To Rule Them All
summary
Tool called onekey implements deterministic EC key derivation (demo code in Go on GitHub) and shows concrete math: given a master public point P = kG and a derivation integer R produce child P' = P + R·G whose private key is k+R. Demo adds derived keys to ssh-agent (no on-disk persistence) and uses secp256r1 (P-256) and EdDSA-style curves. Core claim works in practice; attacker who learns a child private and the R value recovers the master (child-private leak), so R and child keys must be protected.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:40What is anelliptic curve
- 1:30What is elliptic curve cryptography
- 2:00Discrete logarithm problem
- 3:33Eelliptic curve schemes
- 5:15Bitcoin
- 6:20deterministic wallets
- 7:40Bitcoin Improvement Proposal
- 9:20Use Public Keys
- 10:05Easy DSA
- 10:55One Key
- 16:35child key
- 17:25private keys
- 22:15try it out
- 22:55questions
related talks
28mThe Million-Key Question—Investigating the Origins of RSA Public Keys
15mEncryption at Rest – Master Key Based on a Hybrid KEM
29mMaths or magic? End-to-end encryption explained like I'm five
05mHow to defend from an attacker armed with a mathematician
26mOperationalizing Key Management for Regulatory Compliance and Emergency Response
13mEnd-to-End Encryption: The Double Ratchet Algorithm
29mThe Go Cryptography State of the Union
51mKey Management 101: DEKs, KEKs, and Credentials Living Together, Oh My!