Episode notes
In this episode of Bitcoin, Explained, hosts Aaron van Wirdum and Sjors Provoost discuss reusing Bitcoin addresses. More specifically, they explain why reusing Bitcoin addresses is a bad idea.
Reusing Bitcoin addresses is a bad idea for roughly three reasons. The first two of these are that it harms privacy and impedes on the censorship resistance of Bitcoin. In the episode, Aaron and Sjors go over a couple examples of how such a loss of privacy and censorship resistance can negatively affect Bitcoin users.
The third reason that reusing Bitcoin addresses is a bad idea, is that it opens up the possibility of some niche attacks. In certain cases, attackers could extract private keys from signatures after coins are first spent from an address — though this does require that a wallet implemented the signing algorithm wrongly in the first place. There are also some scenarios where quantum computers could in the future extract private keys from signatures if addresses are reused.
Another type of niche attack is a timing sidechannel attack, such as the recently disclosed Hertzbleed Attack. Sjors explains that attackers can potentially derive a private key from a wallet by closely monitoring how the computer that hosts the wallet behaves when signing a transaction. This attack is more plausible if addresses are reused.
Address reuse wiki: https://en.bitcoin.it/wiki/Address_reuse#Security Hertzbleed attack: **
Chapters
00:00:00 Bitcoin Amsterdam and address reuse
00:01:31 What reusing a Bitcoin address means
00:05:04 Privacy risks: savings, income and exchange deposits
00:08:29 Address blacklisting and censorship resistance
00:09:08 Security risks from reused signature nonces
00:13:57 Quantum computers and exposed public keys
00:16:42 Preparing Bitcoin for quantum computing
00:21:54 Hertzbleed and timing side-channel attacks
00:29:00 Practical risks and Bitcoin address terminology
