Getting back a password from Polkawallet JSON File
#4
okay, so that's already good that you think a "easy-to-guess password" could unlock the account.

I think this might be related: https://github.com/polkawallet-io/app/issues/22

but I'm not sure about that. somebody would need to investigate if this is the correct algorithm.

The bad news (at least if that github issue and the claims within it are applicable here) is that it uses some heavy algorithms (scrypt is involved, GPU-resistent, hard to crack).

Do you think you can find some JSON files with known password online (maybe test accounts), or generate a completely new one (without any funds etc) with known password and maybe sent it in a PM to me and/or open a hashcat github issue with the full details.

It would also make sense if we would know which exact code is involved here, for instance is it true that https://github.com/polkawallet-io/app/ is the software and https://www.npmjs.com/package/@polkadot/keyring and https://github.com/polkadot-js/common/tr...es/keyring are related here ?

Unfortunately, until now, I myself didn't know anything about this specific wallet... maybe somebody else has already a clue what the exact algo is here , and can help us a little bit here !?




update: there might be some examples with password here: https://github.com/polkadot-js/common/bl...#L539-L540
but I'm not 100% sure if this is the correct wallet and version (there are different version 2 / 3 etc !!!)
Reply


Messages In This Thread
RE: Getting back a password from Polkawallet JSON File - by philsmd - 07-17-2021, 10:59 AM