Does selectively generating keypairs with particular public-key hash prefix weaken the security?

Question

I'd like to embed 8-bits of information by selecting only keypairs where a hash of the public key begins with those 8-bits.  (The expected number of keypairs that will need to be generated is 256, so there is a little extra work required.)
The goal is to be able to determine the source of a keypair, to aid debugging in a distributed system.
Does selecting only keypairs, where a hash of the public key has a particular property, weaken security?  (Assume that the hashing function is irreversible.)
If so, how?

Donald · Answer

No !!! But more good use a offline generators without internet connection and adding small salt for get addition randomness in private key.

fgrieu · Answer

Does selecting only keypairs, where a hash of the public key has a particular property, weaken security?

No, if the hash used is independent of the public key cryptosystem. Then the selection of private keys made is equivalent to a random selection, and can't harm security. That's even provable.
In theory you'd have to use separate hashes for this selection and other uses. That can be implemented with separate prefixes for multiple uses of the same hash. In practice, if hashing data starting with the public key is nowhere to be found (e.g. because the public key is only hashed as part of a certificate with a non-empty prefix), one is likely OK with just selection from the hash of the public key, as in the question.

Does selectively generating keypairs with particular public-key hash prefix weaken the security?

2 Answers

Add your own answers!

Ask a Question