BIP-38 / scrypt question
Interesting, are you sure the paper-wallet uses the same derivation? E.g. what is the address type, what does the address of the paper wallet start with?

If I look at your code, I think you derive a legacy wallet type, meaning one address directly derived from the public key, which is indeed fast.
Your paper wallet probably uses a more elaborate derivation using BIP44 and possibly segwit (address starting with bc1).
The challenge is to build in these derivation shema's and address types, then let the user chose at which dept they want to search. I would love to see this in hashcat, but this is non-trivial to implement.

For example a BIP4 wallet has a different derivation process to derive a tree of privatrkeys-publickeys-address from a master key and generating new child keys by hashing the master key with an index:

Additionally there are other derivation types, BIP49, BIP84, BIP141
See iancolman tool for deriving privatekey-publickey-address pairs:

I have some code that allows testing and derivation for any type of derivation paths, even custom, but it is build in Python and it is not very fast.

Messages In This Thread
BIP-38 / scrypt question - by sigkill - 09-11-2021, 09:45 PM
RE: BIP-38 / scrypt question - by monyanus - 09-13-2021, 01:52 PM
RE: BIP-38 / scrypt question - by sigkill - 09-13-2021, 07:17 PM