Skip to main content

Questions tagged [security]

For questions relating to the security of IoTA and how to mitigate these issues or avoid them altogether.

Filter by
Sorted by
Tagged with
13 votes
3 answers
1k views

What information is leaked if I reuse an address?

Everyone knows that spending from an address multiple times is bad, because Winternitz OTS. But, what does that mean, exactly? What information is leaked in each signature, and how would an attacker ...
todofixthis's user avatar
  • 1,320
28 votes
9 answers
2k views

How to generate a seed safely?

I am sceptical about online generators. How could I generate a IOTA seed safely offline? Does it need to be on a specific format?
Mahus's user avatar
  • 501
32 votes
1 answer
676 views

How does the system sustain regular low-effort "splitting attacks"?

The whitepaper focuses mainly on attacks in which an attacker tries to double-spend. So the section about the splitting attack examines the case that an attacker tries to effectively create two forks ...
lex82's user avatar
  • 1,087
9 votes
1 answer
328 views

How are addresses calculated from the seed?

I was wondering how addresses are calculated from the seed. Specifically, I thought it was using the hash of the seed plus a nonce to create the address. But I would appreciate if someone could shed a ...
Dominik Harz's user avatar
10 votes
1 answer
986 views

Why is the normalized hash considered insecure when containing the char 'M'

Looking at the code of the iota.lib.js' bundle creation mechanism, a normalized hash is computed and then checked for inclusion of 13 /* = M */. If one is found, the obsoleteTag is incremented, and ...
Akkumulator's user avatar
  • 1,468
4 votes
1 answer
94 views

How do I configure a public node?

How can I configure my node such that it is secure for public access? I am aware that I can use either the --remote-limit-api launch argument, or by setting it in my ini; REMOTE_LIMIT_API=...
Matt Clark's user avatar
14 votes
2 answers
198 views

Can a node steal my seed?

Could someone theoretically set up a node to siphon seeds from people who connect to it? Or is the seed always safe? How is it handled internally?
Muppet's user avatar
  • 908
9 votes
3 answers
137 views

Secure Way to Copy & Paste Seed into Desktop Wallet

I am afraid of keyloggers or other malware on my computer. What is a secure way to copy and paste the Seed from my password manager into the desktop wallet?
Vrom's user avatar
  • 1,946
8 votes
1 answer
203 views

How is address reuse prevented in the current wallet implementation?

When trying to send to a foreign address, I got the following error recently: How does my wallet know, that this address has already been used for sending? It's quite an old address, so I assume I ...
janowitz's user avatar
  • 321
7 votes
2 answers
880 views

Can one send a zero value transaction from any address to any address?

Since zero value transactions do not require a signature, I assume one can send 0 value tx from any address, even if he does not own the corresponding seed. Is this assumption correct?
Akkumulator's user avatar
  • 1,468
5 votes
3 answers
276 views

Should full nodes be public?

Since part of the security comes from it being hard to find enough nodes to peer with to influence the selected transactions, should full nodes be mostly hidden? Will a IOTA attack consist of botnets ...
w00t's user avatar
  • 185
3 votes
1 answer
190 views

Roadmap: How to avoid address reuse with automatic snapshots?

It is well known that an address that was used to send IOTA (i.e. a transaction was signed with that addresses private key) should not be used a second time because security weakens exponentially with ...
BernB's user avatar
  • 39
2 votes
2 answers
270 views

As per "The Stability and the Security of the Tangle", how will IOTA ensure that all honest nodes are continuously using their hashing power?

As per the recently released The Stability and the Security of the Tangle, a 2018 ICUBE - University of Strasbourg "study of the stability and the security of the distributed data structure at ...
user avatar
2 votes
1 answer
127 views

Could a sensor be hacked to steal the money in its wallet?

If there is a sensor with a wallet and someone steals the sensor. Wouldn't it be easy for him to hack the sensor and find the seed?
Vrom's user avatar
  • 1,946
19 votes
2 answers
406 views

How can I safely store my IOTA seed?

I currently store my seed in a plain text file, backed up on a USB drive, which is a security risk. What is the safest way to store my seed since there is no IOTA hardware wallet available yet?
fijter's user avatar
  • 1,099
15 votes
2 answers
1k views

How does IOTA make itself resistant to quantum computing based attacks?

IOTA has been described as "quantum resistant" (not "quantum secure"). What steps did the developers take to make the protocol resistant, and are there further steps that need to be taken in the ...
dreid's user avatar
  • 1,102
10 votes
0 answers
226 views

How would IOTA handle a spam attack that is NOT attempting to successfully double spend, but merely make the network unusable? [duplicate]

So it seems like all of the security solutions mentioned so far are focused on preventing double spend attacks. But what about attacks that aren't motivated by actually successfully double spending?...
Ian Fisch's user avatar
  • 100
9 votes
1 answer
117 views

Does every pending transaction pose a threat for my remaining funds in the wallet?

A moderator on slack told me that every pending transaction poses a threat for my remaining funds in the wallet. Especially when a transaction stays pending for a long time or never confirms. As far ...
user avatar
7 votes
1 answer
112 views

What prevents a malicious node from receiving a transaction and, instead of relaying it, attempting to compromise the now-weakened address?

For example, this scenario: I broadcast a transaction from a previously-unspent-from address, for a large amount, say 1 Ti. The full node I broadcast to is a malicious actor who has been waiting for ...
dreid's user avatar
  • 1,102
7 votes
2 answers
219 views

What is the difference between "double-spending" and "address-reuse"?

As far as I understood: double-spending: is when you do a second outgoing transaction while another one is still in pending. (this is possible only with Android wallet, because the light wallet [...
overkill22's user avatar
7 votes
2 answers
351 views

Address re-use and snapshot

If an address was used more than once to spend, as was the case in the September claim, are addresses that were weakened for violating the Winternitz, One Time Signiture architecture of the tangle, ...
KelpieOnPond's user avatar
6 votes
1 answer
72 views

Can I be forced to reuse an address by confirming a transaction that is part of a double-spend attempt?

Imagine somebody injects two transactions d1 and d2 into the network that together represent a double-spend attempt. Having only incomplete information of all latest transactions in the network, I see ...
lex82's user avatar
  • 1,087
6 votes
2 answers
398 views

What happens if I receive IOTAs at an address I've already spent from?

Suppose I spend funds from an address, but then there's a software bug, or user error, or somebody sends IOTAs to that address afterward, and now I have a used address with a non-zero balance! What ...
todofixthis's user avatar
  • 1,320
6 votes
2 answers
335 views

Exchange Winternitz one-time signatures

Are there any Winternitz alternatives out there which on the one hand make quantum computer attacks hard and on the other hand don't mess with the ability to reuse an address? Or are these properties ...
Jupiter Jones's user avatar
6 votes
1 answer
316 views

Why aren't seeds longer than 81 trytes more secure?

From the wallet FAQ: In order to ensure that only you got access to your iotas you ought to create a sufficiently complex seed. This means a randomized 81 character seed consisting of latin letters ...
todofixthis's user avatar
  • 1,320
6 votes
1 answer
527 views

What prevents someone from using a Precomputed POW Spam Attack against the network?

What prevents someone from using a Precomputed POW Spam Attack against the network? A theoretical attack could use pre-made transactions to be released before their network expiry dates. Rounds of ...
user avatar
6 votes
1 answer
846 views

How does Curl-P's copy protection feature work?

I've read in a few articles that the Curl-P hashing function was designed with known practical collisions, intended as a "copy protection" feature. I'm still having trouble wrapping my head around ...
todofixthis's user avatar
  • 1,320
5 votes
1 answer
425 views

What does it mean that "the tangle is network-bound instead of hash-power-bound like blockchain"?

Can someone explain me in a very simple way what should an attacker do to double spend in IOTA? In the whitepaper I read that a double spend transaction should outweigh the legitimate subtangle. ...
Ale's user avatar
  • 53
4 votes
1 answer
85 views

Does reattaching a transaction compromise my private key for the source address?

The answers to this question state that reusing the same address for spending several times seriously compromises my private key so that should never be done. However, isn't this exactly what is ...
lex82's user avatar
  • 1,087
4 votes
1 answer
97 views

What does the `security` param for `getNewAddress` do?

When I create addresses in the API library (i.e., using getNewAddress()), there is an optional security parameter. What does this parameter do, and what values does it accept?
todofixthis's user avatar
  • 1,320
2 votes
2 answers
75 views

How can I trust a wallet?

as there will be many IOTA wallets in the future. How do I know which one I can trust. I think it would be easy to implement a code that sends your seed to someone else, right?
Vrom's user avatar
  • 1,946
2 votes
3 answers
1k views

How can IOTA's proof of work provide sufficient network security?

This is a controversial post I found in the IOTA slack. The concerns are regarding IOTA's security. How does IOTA approach the specific statements? IOTA is fundamentally broken. It's a PoW ...
Tobi MZ's user avatar
  • 1,607