Private Key Management Flashcards
6 cards from real Blockchain Technology practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Private Key Management flashcards as text
A large financial institution is building a cryptocurrency custody solution to manage billions of dollars in digital assets. They require the highest level of security for private key storage and transaction signing, ensuring keys can never be exported or directly accessed by any single administrator. Which of the following private key management solutions would be MOST appropriate to meet these requirements?
Answer: A Hardware Security Module (HSM).
A Hardware Security Module (HSM) is a specialized, tamper-resistant hardware device designed for secure key generation, storage, and cryptographic operations. It ensures that private keys never leave the secure hardware environment, which is the standard for high-value institutional custody and meets the requirement that keys cannot be exported.
What is the primary advantage of using a Hierarchical Deterministic (HD) wallet, as defined by the BIP-32 standard?
Answer: It allows for the generation of a vast tree of key pairs from a single master seed.
The core feature of HD wallets (BIP-32) is their ability to derive a nearly infinite number of child keys (both public and private) in a structured tree from a single master seed. This simplifies the backup process, as only the master seed needs to be secured, and enhances privacy by allowing a new address to be used for every transaction.
Which of the following best describes a key management technique where a private key is split into multiple unique parts, or "shards," requiring a specific subset of those shards (e.g., 3 out of 5) to reconstruct the original key?
Answer: Shamir's Secret Sharing (SSS).
Shamir's Secret Sharing is a cryptographic algorithm that divides a secret, like a private key, into multiple parts. The original secret can only be reconstructed when a minimum threshold (k-of-n) of these parts are combined. This provides both security and redundancy, as compromising a single part does not reveal the secret.
A user decides to create a new cryptocurrency wallet by hashing a memorable phrase like "to a new world of freedom" to generate their private key. A few weeks later, their funds are stolen. What is the MOST likely vulnerability that was exploited?
Answer: The private key was generated from a low-entropy source, making it susceptible to a dictionary or brute-force attack.
This method describes creating a "brainwallet." Human-memorable phrases have significantly less entropy (randomness) than a cryptographically secure random number. Attackers pre-compute private keys from massive dictionaries of common phrases, book excerpts, and lyrics, and then scan the blockchain for addresses derived from them, allowing them to easily steal the funds.
In the context of modern cryptocurrency wallets, what is the primary purpose of the BIP-39 standard?
Answer: To specify a method for generating a deterministic wallet seed from a human-readable mnemonic phrase.
BIP-39 is the industry standard that specifies how to convert cryptographically secure entropy into a human-readable sequence of words, known as a mnemonic or seed phrase. This phrase serves as a user-friendly backup to recover the binary seed which is then used by standards like BIP-32 to regenerate the entire wallet, including all private keys and addresses.
A cryptocurrency exchange needs to manage its funds. The majority of its assets are held for long-term storage, while a smaller portion is needed to process daily customer withdrawals quickly. Which of the following represents the most secure and practical key management strategy?
Answer: Keep the majority of funds in a cold storage solution and a smaller, operational amount in a hot wallet.
The standard industry practice is to use a hybrid approach. Cold storage (offline keys, e.g., in hardware wallets stored in a vault) protects the bulk of assets from online threats. A hot wallet (online keys) maintains enough liquidity to handle daily operations like withdrawals. This strategy effectively balances high security with operational necessity.