
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@aladas-org/cryptocalc
Advanced tools
Purpose
Cryptocalc is a standalone desktop application which generates Crypto wallets
with either the Non Deterministic (Simple Wallet) or Hierarchical Deterministic (BIP32
) paradigm.
Even though there is already a similar tools online, the purpose is to use these features
locally on your computer in order to reduce the risk of your Private Key / WIF
or seed phrase informations being stolen.
Supported Blockchains: Bitcoins (BTC
), Ethereum (ETH
), Solana (SOL
),
Ripple (XRP
), DogeCoin (DOGE
), Cardano (ADA
), TRON (TRON
),
Avalanche (AVX
), Bitcoin Cash (BCH
), LiteCoin (LTC
), Dash (DASH
) and Firo (FIRO
)
NB: Cryptocalc uses ElectronJS as well as many modern and popular
Desktop applications
Setup
Inno Setup
and following the Howto
provided in the _inno_setup
subfolder (Howto build cryptocalc_setup.txt
)C:\Users\$CURRENT_USER\AppData\Local\Programs\Cryptocalc
$DEFAULT_SETUP_FOLDER\resources\app\_output
cmd
D
then type D:
)md tools
then cd tools
)git clone
followed by the .git
URLgit clone https://github.com/ALADAS-org/Cryptocalc.git
cd Cryptocalc
npm install
Release notes
0.3.14
0.3.11
Seed phrase
0.3.8
Seed phrase
0.3.7
Seed phrase
(taking into account the Ideographic Space
as a separator between words instead of the Normal Space).renderer_gui.js
and electron_main.js
. The Singleton design pattern
now uses Symbol()
for the value of the static field #key
.0.3.4
HD Wallet
(see 4.1.5)Seed
tab renamed to Entropy
SWORD Wallet
Cryptocalc installer
on SourceForge
0.3.3
SWORD Wallet
in Wallet Types. SWORD
is an acronym which means
Simple Wallet Over Randomized Deterministic
, it's an hybrid between Simple Wallet
and HD Wallet
because it hides the Derivation Path
logic (which contains Account
and Address Index
), thus you
don't need to care or understand the principles of Hierarchical Deterministic wallets, but it allows
to generate all the cryptocurrencies provided by HD Wallet
.seed phrase
in 2 parts for the traces.0.3.2
File.New
, File.Open...
and File.Save As...
menu items.wits
file (JSON
format). This file can be opened either
with File.Open...
or with Cryptocalc.exe
by double clicking on it.Help / Resources / Setup guide and User's Manual
menu itemWallet Mode and
Cryptocurrency` are now displayed in the title bar (e.g. Simple Wallet: BTC)0.2.2
Dash
blockchain in HD WalletFiro
and Bitcoin Cash
Cryptocalc User Guide
You can launch Cryptocalc either by using the Cryptocalc Standalone installer (see 2.1)
or by downloading the npm package
(see 2.2) then double clicking on _run.bat
.
$DEFAULT_SETUP_FOLDER\resources\app\_output
: Node that this folder
won't be deleted automatically if you uninstall CryptocalcBIP39
specification) then in the Shortened seed phrase each mnemonic is represented
only by its 4 first characters (with the first character in Uppercase as a mean to separate mnemonics).NTAG213 NFC
(see 4.2.3).Image
or Fortunes
Image
(Default source)
and Fortunes
(drawn from a compilation of 12803 Fortune Cookies).
Please notice that a text is not considered as random enough
for an Entropy Source thus Image
is now the default Entropy Source
(Notice that an image is much better in terms of randomness than a text).
png
, jpg
or svg
) from you local folders.www/js/img
folder.www/js/img/CryptoCurrency
folder and the first image
is always our logo (Zilver_64px.svg
).Wallet
tab)
Derivation Path
used by HD Wallets. So a it's a good fit to
Give it a Try and start creating your Cryptocurrency Wallets with minimum knowledge.BIP32
HD wallet tree_ is fully by the Entropy or seed phrase.
The Entropy is isomorphic with the Mnemonics Sequence which may be called either a seed phrase, Mnemonics
or even SRP (Secret Recovery Passphrase).Entropy
wallet tab).
This will hide the Entropy Source and Salt fields which are meaningless in
this situation. You can then change either the Account or Address Index
fields in the Wallet tab page. This will show a new [Refresh] button
to recompute the wallet once you gave finished editing these fields
(you can input a decimal value between 0 and 9999).
Pushing the [Refresh] button (or hitting either [ Return ] or [ Enter ] keys)
will recompute the wallet accordingly.SWORD
is an acronym which means
Simple Wallet Over Randomized Deterministic
, it's an hybrid between Simple Wallet
and HD Wallet
because it hides the Derivation Path
logic (which contains Account
and Address Index
), thus you
don't need to care or understand the principles of Hierarchical Deterministic wallets, but it allows
to generate all the cryptocurrencies provided by HD Wallet
.Cardano
HD wallets, the Account
and Address Index
parameters are not taken
into account by the Wallet Managers which I have tested (namely Guarda
and Yoroi
) because they ask for
the Mnemonics
(Seed phrase
in Cryptocalc). This is why in by Cryptocalc, these parameters are hard-coded
to Zero (for Cardano
HD wallets only).Help menu
(Help / Resources / Ian Coleman BIP39)Refresh
icon, like in the main toolbar).
Important Notice: Once a password is provided, you must use the [Apply] button to recompute the HD hierarchy,
this is the reason why Save is disabled (in the main toolbar and in the 'File' menu) until you click on the [Apply] button.UUID
) to ensure that the Entropy will be different at each Generation even if the Entropy Source
is the same. Thus the Entropy will be unique at each press of [Generate] button.Wallet
tab page. There's also an [Explorer...] button which allows to check
the generated address in the appropriate Blockchain Explorer.Save
Wallet InformationsFile/Save
(or the Save icon in the main toolbar), you can save the Wallet Informations in a timestamped
subfolder (eg. 2024_10_07_21h-4m-4s-3_BTC_EN
) under _output
folder.
This subfolder contains wallet_info.txt
and a wallet.json
with the informations displayed in Entropy and Wallet tab pages.
png
images) for Address
, Private Key
, Seedphrase
,
Entropy
and WIF
(if applicable).xtras
subfolder where these QR codes are provided
in the svg
format. There is also a Rectangular Micro QR code (rMQR
) of the
Entropy
(Rectangular Micro QR Code, R15x59
or R15x77
version depending on
Entropy size
) and an experimental Ultracode
color QR code of the Entropy
.QRQR
an Android QR Code reader published by Arara on the Google Play Store.Entropy
field of Cryptocalc.Entropy Size
and
Derivation path
(if applicable, don't forget to use the [Refresh] button)
than those used when the wallet was created (these informations
are provided either in the wallet_info.txt
or in wallet_info.wits
).Open
_ a previous Wallet Informations of a previously saved wallet
.txt
but also as a .wits
file (JSON
format)..wits
file can be opened either with File.Open...
menu item or 'Open...' icon
in the toolbar. It can be also be opened in Cryptocalc.exe
by double clicking on the .wits
(File extension to Application feature): this will launch Cryptocalc.exe
(cf. 2.1 for installing
Cryptocalc.exe
with the Cryptocalc Standalone installer) /File.Save As...
which will save the wallet with a different timestamp than the original one.Account
and/or the Address Index
(dont forget to push
the [Refresh] button). Now you can save the new wallet with File.Save As...
and if you didn't change the Entropy
then this new wallet will belong to the same Bip32 HD Wallet Tree
(see 5.2) than the original one.Guarda
Guarda
.BIP39
dictionary (see also 6.1.1).
You can choose to display these indexes in Decimal or Binary
(in Binary you can check that the computed Checksum bits are added at the end
of the converted Entropy to determine the index of the last word).BIP32
hierarchy that is determined by the
seed phrase (also called the Secret Recovery Passphrase).Tools/Options
)Default Blockchain
, Wallet Mode
and Entropy Size
.
These values are defined in www/config/options.json
file.www/config/defaults/options.json
)l10n
) feature is the translation of
GUI Labels to adapt to the locale (eg. en
).
A locale name can be composed of a base language, country (territory) of use,
and optionnally a codeset (eg. de_CH.UTF-8
).
The locale is provided as part of your machine's environment.
Cryptocalc only uses the 2 letter language part (eg. en
).
Localization is enabled by a JSon file in the www/js/L10n
folder
(eg. gui-msg-en.json
) .
Currently only en
and fr
are provided.Guarda
you can import
a wallet generated by Cryptocalc:
BTC
,ETH
,XRP
,ADA
,DOGE
,LTC
,SOL
,AVX
,TRON
,BCH
,DASH
,Firo
BTC
wallets)NTAG213 NFC
with
144 bytes useable capacity. This is enough to store the Shortened Seedphrase,
with a 24 words Shortened Seedphrase
the maximum required capacity is 96 bytes/characters (24*4, cf. 4.1.1)
or even less (as some mnemonics have only three characters).Appendix
BIP39
: a Dictionary of 2048 wordsBIP39
(BIP
is the acronym of Bitcoin Improvement Proposal) is a specification regarding:
BIP32
: Hierarchic Deterministic wallets
BIP32
specifies how to generate wallets with are all derived from the same Entropy
or seed phrase (also called the Secret Recovery Passphrase).
A seed phrase of only 12 words is enough is most Wallet Managers but it is much more secure to use a 24 words
seed phrase if possible (e.g. Ledger hardware wallet manager).m/44'/60'/0'/0/0
:
Start at the master key (m)
Follow the BIP44
specification (44′)
Derive the key for Ethereum (for which Coin type is 60) (60′)
Access the first account (0′)
Choose the external chain, used for public addresses (0)
And finally, generate the first address in this sequence (0)
FAQs
Cryptocurrency wallet generator
The npm package @aladas-org/cryptocalc receives a total of 211 weekly downloads. As such, @aladas-org/cryptocalc popularity was classified as not popular.
We found that @aladas-org/cryptocalc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.