+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Bitcoin/altcoin wallet PIN recovery (/thread-9849.html)
Bitcoin/altcoin wallet PIN recovery - HetanAwke - 02-04-2021
I'm trying to recover a 10-digit PIN for an old bitcoin-based altcoin (dogecoin) wallet. From what I found reading btcrecover code this is different from a regular encrypted wallet in that regular bitcoin-based wallets use a SHA512-derived key for AES-256 CBC while this "PIN-lock" uses a Scrypt-derived key instead for the same AES-256 CBC.
Hashcat --help mentions mode 15700 for Ethereum Wallets using SCRYPT while code for AES-256 CBC is in base implementation of mode 11300 for recovering encrypted Bitcoin wallet passwords.
My questions are:
- Am I right to consider hashcat for this purpose?
- What does it usually take to get a new mode introduced into hashcat in terms of votes, wait time in the requested modes queue, beers bought?
- Where do I start in the process of learning to add such PIN recovery mode to hashcat myself, knowing that both Scrypt and AES-256 CBC are already in the repo and could possibly be reused?
I don't remember enough about the PIN to consider anything else than bruteforcing it.
I did run a test creating an empty, new wallet, setting a PIN for it and managed to recover that PIN using btcrecover.
The wallet in question and the test wallet were generated with: https://github.com/langerhans/dogecoin-wallet-new
which is a fork of: https://github.com/bitcoin-wallet/bitcoin-wallet
bitcoin2john I tried using before I figured out the difference in how the keys are derived during regular wallet encryption and a PIN-lock: https://github.com/openwall/john/blob/bleeding-jumbo/run/bitcoin2john.py
RE: Bitcoin/altcoin wallet PIN recovery - undeath - 02-05-2021
1. in general, yes. but you will need a new module
2. I wouldn't put too much hope into a feature request. Some things never get implemented and I haven't seen a sign of life from atom on any public channel in the past months.
3. If you're lucky all you need to do is some copy-paste stuff to combine modes 15700 and 11300. Other than that, there's a development overview here: hashcat plugin development guide, and commits in the git history might be helpful, too.
RE: Bitcoin/altcoin wallet PIN recovery - HetanAwke - 02-05-2021
(02-05-2021, 05:56 PM)undeath Wrote: 1. in general, yes. but you will need a new module
2. I wouldn't put too much hope into a feature request. Some things never get implemented and I haven't seen a sign of life from atom on any public channel in the past months.
3. If you're lucky all you need to do is some copy-paste stuff to combine modes 15700 and 11300. Other than that, there's a development overview here: hashcat plugin development guide, and commits in the git history might be helpful, too.
Thanks for responding. Does this entire Scrypt+AES-256-CBC sound to you like something worth delegating to GPU, or is this combination among the ones with no GPU advantage, or even a significant penalty? Should I expect a big difference between the process of implementing the module for CPU compared to making it for GPU or is the usage of either handled by core hashcat?
RE: Bitcoin/altcoin wallet PIN recovery - undeath - 02-05-2021
Depends on the scrypt parameters. Especially combinations with high memory usage are a poor match for GPUs. Development-wise it doesn't make a difference. Modules are written in OpenCL and device-independent.
RE: Bitcoin/altcoin wallet PIN recovery - gold333 - 11-29-2022
Thx for post