2

Is it possible to generate a key pair that has already been generated? Wouldn't it collide with an existing value?

I assume it is mathematically very unlikely, but odds higher than 0 are still possible.

JustAnotherStackOverflowUser
  • 113
  • 1
  • 9
  • If you are worried someone will find your key, spread your wealth among several addresses. – zundi Nov 22 '17 at 06:50

1 Answers1

4

Yes, it is possible to create an already generated and in use address. The chances of that is indeed larger then 0, but minimalistic. But really small. And if I say really small, I mean extremely small. And if I say extremely small, I mean very extremely ultra low super duper close to zero. It is definitely NOT something to be considered as a weakness, never ever (because it will cost more energy before you have 50% to hit a duplicate address then the whole sun provides in its whole life time then). source

Mathias711
  • 1,426
  • 1
  • 13
  • 27
  • 2
    You are assuming a perfect implementation with a flawless random number generator. However, random number generation is not as easy as it seems at first glance and can easily get screwed up. There are numerous cases of cryptographic systems losing security in practice because of weak RNGs. When two users use an implementation with the same flawed RNG, it could be more likely to happen than expected that they generate the same keypair. – Philipp May 18 '14 at 10:51
  • 1
    Yes, you are completely right. But afaik people have been testing this by running programs that generate and check addresses for balance, and had so far no success. But yes, if the RNG sucks, multiple addresses can be generated, but it is not expected at the moment – Mathias711 May 18 '14 at 15:51
  • So, we can conclude bitcoin has no defense at all apart from the mathematical improbability of key pair generation? No code at all to handle this seemingly improbable case. – JustAnotherStackOverflowUser May 18 '14 at 21:49
  • 1
    Yes. But don't underestimate it. In the link it says that there are 10^38 addresses for each person in the world. The RNG must really really suck if is going to generate double addresses. Furthermore, it doesn't matter if it hits an address that once was used for a transaction and now obsolete. Only when there is a substantial amount of Bitcoin on the address it matters. It is not worth the cpu power. The chance that you are robbed or hit by a car (or the dinosaurs are revived and you get eaten) are MUCH higher. – Mathias711 May 19 '14 at 05:14
  • 1
    So to conclude, there is NO defense against double generated addresses, but the real life consequences are neglectable – Mathias711 May 19 '14 at 05:16
  • 1
    The unlikelyhood IS the defense. Otherwise they wouldn't have made those numbers that large. – Jannes May 22 '14 at 14:34