RE: 再来说说Password和Key的关系 & 账户安全

[andelf]

生成算法如下：

role in  ("posting", "active", "owner" or "memo")

seed = username + role + password  # 生成字符串

hash0 = sha256(seed)
hash1 = sha256(0x80 + hash0)
hash2 = sha256(hash1)

checksum = hash2[:4]  # first 4 bytes
final = 0x80 + hash0 + checksum

private_key = base58(final)

Python 实现如下：

import hashlib
import base58

# there's a circular import bug in steembase
import steem
import steembase

username = 'username'
password = 'your password'

def generate_wif(username, role, password):
    assert role in ("posting", "active", "owner", "memo")

    hash0 = hashlib.sha256((username + role + password).encode()).digest()
    hash1 = hashlib.sha256(bytes([0x80]) + hash0).digest()
    hash2 = hashlib.sha256(hash1).digest()
    final = bytes([0x80]) + hash0 + hash2[:4]
    return base58.b58encode(final)


def priv_to_public(priv_wif):
    privkey = steembase.account.PrivateKey(priv_wif)
    return str(privkey.pubkey)

for role in ("posting", "active", "owner", "memo"):
    wif = generate_wif(username, role, password).decode()
    print('{:>7s} Private Key: {}'.format(role.title(), wif))
    print('{:>7s} Public Key:  {}'.format(role.title(), priv_to_public(wif)))

$ python gen_key.py
Posting Private Key: 5JsLXkiW13a4cSAVqi9G8AKqk5as7dvymz4v5x8rXKbMVh96sqn
Posting Public Key:  S.M8g42eGRrtN9wwKC2t6ikdjM9kkebWQjbtDWk7vYowwwKLdsRo
 Active Private Key: 5.PWghhgQR2hFuvZMUZ5z2PT9a2Xb7eUninriUdPfRn8noUEFM
 Active Public Key:  S.M6ACCftKZ5gyRE1osoYtcUWa3Ht9NvnWuSLHr4yEVP2c4LNsTE
  Owner Private Key: 5.JocEuo7BQUcoRh33mrmdNGcsicMABdFWxdWQVDYoXmtrdd7Mp
  Owner Public Key:  S.M8arswqH7BZz6G8Yz8P1kp9Lv2zkJXtbe5nDQeq8QhvV5snhky
   Memo Private Key: 5J.oA28FKi7FLMfi5rDZjoUhRmsZ6XmPDiTj3F6EZ1rq9PGi9y
   Memo Public Key:  ST.84QCZhejNgAz4Q3SKTp1mcZ1wLnqRESvEzFhPxaJcG7toghkB