Bitcoin Upgrade BIP461 Aims to Detect Key Leakage

New Protocol Aims to Improve Wallet Security

A new Bitcoin improvement proposal, BIP461, could bolster wallet security by making it easier to detect hidden key leakage. Authored by Liam Gilligan and merged into the BIPs repository on September 16, the draft defines a common signing procedure for ECDSA, Bitcoin’s existing signature scheme.

The core idea is that independent, compliant signers should produce identical signatures given the same secret key and message hash. Any deviation from this standard could indicate key compromise. This provides a benchmark for detecting potential vulnerabilities, though it doesn't guarantee complete protection.

How BIP461 Works

ECDSA allows signers some flexibility in creating valid signatures, including the use of a nonce. Malicious firmware could exploit this freedom to conceal key material within signatures that still pass verification. BIP461 addresses this by specifying a deterministic procedure, reducing the potential for hidden leakage.

However, the proposal’s authors emphasize that simply accepting a signature doesn’t confirm the key’s safety. The real value lies in the ability to compare signatures from different, independent signers. A mismatch flags a potential issue, while a match only confirms compliance for that specific instance.

Limitations and Next Steps

BIP461 focuses on ECDSA signatures, while previous research – like the Dark Skippy disclosure – demonstrated leakage using Schnorr signatures (BIP340). The proposal also doesn’t prevent a malicious device from leaking keys on selected transactions while remaining compliant during testing.

Currently marked as “Draft,” BIP461 requires test vectors and a reference implementation to advance to “Complete.” Its ultimate effectiveness will depend on widespread adoption by wallet developers and the ability to account for both detection limits and the inherent risks of handling private keys.

Source: CryptoSlate