Skip to main content

Questions tagged [security]

For questions relating to the security of IoTA and how to mitigate these issues or avoid them altogether.

Filter by
Sorted by
Tagged with
28 votes
9 answers
2k views

How to generate a seed safely?

I am sceptical about online generators. How could I generate a IOTA seed safely offline? Does it need to be on a specific format?
2 votes
5 answers
426 views

Seed generator best and safe? [duplicate]

Which is the best seed generator and is there an official one Thanks
1 vote
1 answer
49 views

How to copy and paste Seed from passwordmanager to light wallet [duplicate]

To confuse a keylogger I don't copy and paste the whole seed into the light wallet, but only part of it and the next part I write by myself before copy and past the next part and so on. Or I write ...
5 votes
2 answers
95 views

How much of my security is improved using other levels of security when generating the seed?

I had a hard time answering this question because I do not know how much security levels improve security in quantitative terms. Is this right? e.g. (Hashspace increment) 81 trits => 27^81 ^1 (low ...
4 votes
1 answer
125 views

How is a Seed stored in an IOTA wallet?

How is a Seed stored in an IOTA wallet? Can I gain my Seed back if I lose it?
10 votes
1 answer
986 views

Why is the normalized hash considered insecure when containing the char 'M'

Looking at the code of the iota.lib.js' bundle creation mechanism, a normalized hash is computed and then checked for inclusion of 13 /* = M */. If one is found, the obsoleteTag is incremented, and ...
9 votes
1 answer
328 views

How are addresses calculated from the seed?

I was wondering how addresses are calculated from the seed. Specifically, I thought it was using the hash of the seed plus a nonce to create the address. But I would appreciate if someone could shed a ...
13 votes
3 answers
1k views

What information is leaked if I reuse an address?

Everyone knows that spending from an address multiple times is bad, because Winternitz OTS. But, what does that mean, exactly? What information is leaked in each signature, and how would an attacker ...
1 vote
2 answers
226 views

Trinity Helper (Renderer)

Previously, I have had no problem opening Trinity on my Mac and after providing my password, it opened correctly. I updated after the recent closure and again, all was satisfactory. I have not used ...
3 votes
2 answers
111 views

crypto documentation for iota?

Is there a documentation about the crypto-primitives and the crypto protocols, that are used by iota and how they are implemented? And if so, where ;-)
0 votes
1 answer
49 views

Is it secure to enter your seed in a browser form to publish data to IOTA Tangle?

I am trying to publish my data on IOTA Tangle using MAM. For this, I have designed a web form where I have to enter my seed and press the publish button. The actual data is fetched from firebase ...
1 vote
1 answer
28 views

How is Tangle Quantum Immune? [duplicate]

I was going through the iota tangle documentation and features and found one of the feature mentioned as Quantum Immune , so basically looking for resources to understand the quantum immune property ...
1 vote
2 answers
87 views

Sending data as input in IOTA

I am Muhammad, working with my way to use IOTA to fetch data from IDS/IPS. IOTA uses 2 transactions as input if I am not wrong. I want to send data of IDS to IOTA. I am using Grafana and mysql to ...
3 votes
1 answer
74 views

How secure is storing IOTA in Ledger Nano S?

Is storing IOTA in Ledger Nano S completely secure? I am asking because IOTA doesn't use elliptic-curve cryptography. Does storing and using IOTA in Ledger Nano S may make it easier for an attacker ...
1 vote
1 answer
121 views

Why does Iota try to roll its own crypto?

Having just come upon IOTA, I am struck by the combination of bold vision and something that looks like a definite no-no. First of all, the IoT is the absolute dream come true for eavesdropping and a ...
1 vote
0 answers
32 views

How do I keep IOTA secure? [closed]

I am setting up a website where users buy and sell IOTA with USD. I've gotten some general safety tips about keeping your seed secure but I wanted to know what I could do to be safe from hackers, ...
1 vote
1 answer
59 views

Coordicide: Would using public key encryption as a mechanism for node identity impact Iota's quantum resistance?

per the white paper In order to identify nodes, it is necessary to introduce global node identities. Tothis end, we envision using common public key cryptography to sign certain dataand to ...
1 vote
1 answer
51 views

Cracking seed with list of addresses and indexes

I have an open source offline airgapped encrypted device for signing transactions. Seeds are stored on this device. Signed transactions are passed to an online machine as a parade of qr-codes for ...
3 votes
3 answers
121 views

Sending seeds to someone securely

If I want to send a seed to someone. How would you do it securely? Is it maybe even possible through the tangle? For example I have a seed with 50Miota and I want to give it away to a friend who ...
2 votes
1 answer
45 views

Does Broadcasting a Bundle on Both MainNet and TestNet Facilitate Brute Forcing the Seed?

I have made an open source airgapped device for signing bundles offline. A main purpose is to address the possiblity that the components we use to make our devices are already compromised before ...
3 votes
0 answers
107 views

Is MAM encrypted message has perfect secrecy?

Here I am referring to MAM in restricted mode, where side key is used to encrypt the message. One time pad is known for perfect secrecy. Since MAM uses the one-time pad, is MAM encrypted message has ...
2 votes
1 answer
160 views

Sybil attack with IOTA?

The solutions to attacks proposed by IOTA white paper seems unclear, in particular, in case of double-spending, it remains unclear what stops a computationally powerful adversary from conducting a ...
6 votes
1 answer
527 views

What prevents someone from using a Precomputed POW Spam Attack against the network?

What prevents someone from using a Precomputed POW Spam Attack against the network? A theoretical attack could use pre-made transactions to be released before their network expiry dates. Rounds of ...
2 votes
0 answers
30 views

what happen if we are in an untrusted network [closed]

I am discovering Iota and I am trying to find out if I it can be applied to securely send command between iot device, being 100% sure the command has been received. My concern is about the network, ...
3 votes
1 answer
87 views

Adress reuse with zero value transactions

If I send multiple zero value transactions from address A, containing several messages to broker a deal, is it safe to (re)use that address later on for a payment (to settle the deal)?
3 votes
1 answer
119 views

How does the IOTA Foundation determine if a spend is a typo or a real spend?

According to Come-From-Beyond in the emails send to DCI: The Coordinator is used as an extra protection measure. Particularly, it stores all transactions that reach it, this allows us to recover ...
2 votes
0 answers
104 views

Can the coordinator be found or identified?

The coordinator is currently vital to the operation of the Iota network. There are both security (leaking the seed used to generate milestones) and availability (it must be able to issue milestones) ...
-1 votes
1 answer
41 views

What is the absolute minimum cumulative weight that a transaction must have to be considered confirmed by a vendor?

I assume that referencing a Milestone is not sufficient for a vendor (exchange). That is, they must be making sure that both a Milestone is referenced AND that some time or cumulative weight threshold ...
6 votes
1 answer
846 views

How does Curl-P's copy protection feature work?

I've read in a few articles that the Curl-P hashing function was designed with known practical collisions, intended as a "copy protection" feature. I'm still having trouble wrapping my head around ...
1 vote
1 answer
112 views

What could an adversary do with the seed of the coordinator?

The coordinator issues milestones that the Iota network use as a root of trust when validating transactions. These milestones are signed, which in turn means that keys exist for signing the milestones....
0 votes
0 answers
54 views

If the coordinator were to be identified or located, what attacks could be carried out against it?

The coordinator is currently vital to the operation of the Iota network. There are both security (leaking the seed used to generate milestones) and availability (it must be able to issue milestones) ...
2 votes
2 answers
43 views

Are inbound/outbound Iota connections encrypted?

If I am running a full node, what can an adversary determine from sniffing the traffic to and from my node, or is it all encrypted?
2 votes
1 answer
107 views

When can a transaction be considered irreversable? (without COO)

In an interesting exchange between Come-From-Beyond (CFB) and a Nxt developer, the question is asked: DEV. So when can a transaction be considered irreversable? CFB. Never, look at formula #14 in ...
2 votes
1 answer
127 views

Could a sensor be hacked to steal the money in its wallet?

If there is a sensor with a wallet and someone steals the sensor. Wouldn't it be easy for him to hack the sensor and find the seed?
2 votes
0 answers
65 views

How is the secrecy of the Iota seed maintained on IoT devices?

Iota is intended to be deployed on IoT devices. A problem with IoT devices is that they are placed in insecure locations, allowing attackers to gain physical access and perform advance/prolonged ...
2 votes
2 answers
270 views

As per "The Stability and the Security of the Tangle", how will IOTA ensure that all honest nodes are continuously using their hashing power?

As per the recently released The Stability and the Security of the Tangle, a 2018 ICUBE - University of Strasbourg "study of the stability and the security of the distributed data structure at ...
15 votes
2 answers
1k views

How does IOTA make itself resistant to quantum computing based attacks?

IOTA has been described as "quantum resistant" (not "quantum secure"). What steps did the developers take to make the protocol resistant, and are there further steps that need to be taken in the ...
32 votes
1 answer
676 views

How does the system sustain regular low-effort "splitting attacks"?

The whitepaper focuses mainly on attacks in which an attacker tries to double-spend. So the section about the splitting attack examines the case that an attacker tries to effectively create two forks ...
7 votes
2 answers
880 views

Can one send a zero value transaction from any address to any address?

Since zero value transactions do not require a signature, I assume one can send 0 value tx from any address, even if he does not own the corresponding seed. Is this assumption correct?
2 votes
2 answers
181 views

How to send a sidekey securely to the subscriber for my channel

Sending the sideKey and channel-id is important for new subscribers to read my stream. How can I securely transmit them over the network? Shouldn´t be the key exchange algorithm also quantum proof?
2 votes
3 answers
131 views

What happens if we generate a "seed" that already exists?

According to this answer, "our seed is as the combined username and password that grants access to our bank account. If anyone obtains our seed, they can login and access our funds." Despite ...
2 votes
3 answers
1k views

How can IOTA's proof of work provide sufficient network security?

This is a controversial post I found in the IOTA slack. The concerns are regarding IOTA's security. How does IOTA approach the specific statements? IOTA is fundamentally broken. It's a PoW ...
5 votes
2 answers
309 views

What's with all the pending/unconfirmed transactions with the "STOLEN"?

I've noticed that every few seconds transactions show up on live Tangle trackers with a tag of: 9999STOLEN9IOTAS999F***9YOU Here a pending one valued at $144k which appeared 3 minutes ago: ...
2 votes
0 answers
97 views

How to compute the % of network computing power the attacker hold?

It is known generally that Tangle is susceptible to 34% attack(of total computing power) that gives a 100% successful attack. The example given on page 19 of white paper says that an upper limit to ...
1 vote
1 answer
48 views

Can a bundle be 3 transactions for security level 1?

A bundle has 4 transactions: The output; address and amount of IOTA recipient gets. The input; address, and amount of IOTA sender gives, and half of their signature. The other half of the sender's ...
0 votes
2 answers
476 views

How can I know if my IOTAs were stolen?

I see that my balance is 0i, yesterday there was a positive balance. I see a transaction confirmed going out that I didn't make. I created my seed using an offline /urandom command and mixing up few ...
3 votes
1 answer
1k views

IOTA Winternitz Signature Scheme Details

IOTA uses Winternitz one time signature scheme (W-OTS). Page no 45 W-OTS uses one-way function f and cryptographic hash function g. W-OTS selects parameter w > = 2, which is number of bits to be ...
5 votes
1 answer
124 views

On average, what % of my private key is compromised on the first address re-use, and what exponential effect does it have on security?

Each time we use an address, 50% of your private key is revealed at random. When 50% of the private key is revealed, a computer would have to do 2^256 computations to crack it, similar to the SHA-...
-2 votes
1 answer
59 views

Is it really safe? [duplicate]

How likely is it that someone will discover my seed? either by brute force or by trying to generate a new one.
2 votes
2 answers
150 views

Will a specialized chip make IOTA more secure

There are rumors and hints coming directly from the IOTA team about some specialized chip based on the ternary logic being developed somewhat secretly. Because Curl hash function uses ternary logic ...