Why are the addresses of the same mnemonic different in different wallets?

icp2 · December 6, 2021, 7:09am

After the same mnemonic phrase is imported into Stoicwallet wallet and PLUG wallet, why are the addresses and Principal IDs corresponding to the two wallets different?

icp2 · December 7, 2021, 9:05am

Has no one noticed this problem?

timo · December 7, 2021, 3:45pm

Yes, I notice the same behavior. Not sure if it is necessarily a problem, but yes, I can see that it would be nice if they were the same.

Stoic wallet uses an Ed25519 key constructed by @dfinity/identity - npm. Maybe Plug uses an ECDSA key or does something else differently, I couldn’t find it quickly in their code.

It would be nice to have this documented so that people can write recovery tools that work for all wallets.

dpdp · December 7, 2021, 3:50pm

Plug uses Sec256kp1

github.com

Psychedelic/plug-controller/blob/main/src/utils/crypto/keys.ts#L28

    
      
            index = 0
          ): tweetnacl.SignKeyPair => {
            // Generate bip39 mnemonic. [Curve agnostic]
            const seed = bip39.mnemonicToSeedSync(mnemonic);
          
          
  // Derive key using dfinity's path
            const { key } = derivePath(DERIVATION_PATH, seed.toString('hex'), index);
            return tweetnacl.sign.keyPair.fromSeed(key);
          };
          
          
export const createSecp256K1KeyPair = (
            mnemonic: string,
            index = 0
          ): Secp256k1KeyPair => {
            // Generate bip39 mnemonic. [Curve agnostic]
            const seed = bip39.mnemonicToSeedSync(mnemonic);
            const masterKey = HDKey.fromMasterSeed(seed);
          
          
  // BIP 44 derivation path definition
            // m / purpose' / coin_type' / account' / change / address_index ---> this being the subaccount index
            const { privateKey } = masterKey.derive(`${DERIVATION_PATH}/${index}`);

with derivation path: plug-controller/constants.ts at main · Psychedelic/plug-controller · GitHub

Safik · January 24, 2022, 1:09pm

This is really a surprise for me.
I implemented a mobile wallet and used Secp256K1 KeyPair
https://forum.dfinity.org/t/difiwallet-mobile-wallet/10406
And this is a problem that I need to fix, or add a second provider, or specify two addresses. Users will not see their assets and will consider them lost

You can also make requests to two addresses and display them in the interface.

Damn, I was against seed from the very beginning. It is better to use simple cryptography without add-ons.