Skip to content

BIP32: Missing seed bit-length validation in master key generation #127

Description

@kuliq23

I found that HDKey.from_seed performs no seed length validation.

However, minimum and maximum bit-length constraints are defined in BIP32.

Generate a seed byte sequence S of a chosen length (between 128 and 512 bits; 256 bits is advised) from a (P)RNG.

Based on the remarks in bip32.py and bip32.md the specification appears to be known but not enforced. I wonder whether there is a specific reason for this.

Found using the bitcoinfuzz tool.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions