Private Key Onion
👉🏻👉🏻👉🏻 ALL INFORMATION CLICK HERE 👈🏻👈🏻👈🏻
Sign up or log in to view your list.
I am working on a project that will basically sell .Onion (TOR) domain names. The process of generating the domains is similar to mining bitcoins - RSA private keys are generated en mass and if one randomly matches something in my wordlist - then it gets saved off somewhere and added to a database.
The problem here is that this is still a slow process to do solo - so in order for me to try and make it a collaborate exercise - I want to create an online API / Rest API that will allow people to upload their domains and private keys for them to sell on the site.
The problem is - I don't quite know how to verify their domain name against the private key.
Eg: They would be providing a domain like
and the key would be: -----BEGIN RSA PRIVATE KEY----- MIICXQIBAAKBgQCb+wlPxR8VoUJsYcEFsPX+LfB3jorW9QlH1N38itQvMs0RyTCB +c7hfYQH2f8Z67lobWvveYct51ykhB8n3AluMYIF3OxGlmQJuMIFQmKFryLexzPj LEPREB7+KmeL9Sx1sL4a2Z0qJL4501Ij0T5C3cDEMOvUQBpBttpuUbj1RQIEZTIY AQKBgBwWDEMOYKaSO17xJRuf32CDYJcDKtkJ1GlWROHxREo68J+74DqF55rnoYl/ 4OkfjUMA2WjjjASVRmviBD79vni3eB9MFNzDEMOYa6EIyo1vDEMOzEnfrszkPGEj vOCHbDiG/FlZsCKsADEMOEAuAUQ3W8669Du4FrO9/al+1IudhAkEAy+KBk8HFsO8Z UttdlsLt8//l+NbEMmWF/I588EGyYWUuPUVJd5Xv6iSaDMdecjeW/xf4Wja5C91n lCfb/lxhsQJBAMPZ2fzcUpyKhk6JretSyoq0iVQCO5Pn/0QwTwRUbKreXnnVBYY+ uco2ocfRwsmVK4LUwPgict5qw10bZfl8vdUCQATUV/S0zNc+DEMOw/7p5oJk5hwa +Hrhcf5aVw1AOqySGs0e9V+qDYIjrbkg/BDEMOD00bTTV9a9h3poFrm+DEMOQF2t lgqYbgDEMOZbE+PgebFB6swKfx9Px7+PnNsBK+Mld6pRyldfQ2DEMOr/cy4JQDYA oyX51SNWUMJzkYgeMEUCQQC8i6b3e06B9+++NGADEMO9F5KhlDr1wwSQqnNccDX5 N5vnlhJ/0DGxIMm/bP1ZPUK4/bmvKjNYd7D8zuz2cPor -----END RSA PRIVATE KEY-----
Could someone point me in the direction of some .Net code that can take a private key, and verify that the domain also provided is authentic? https://github.com/lachesis/scallion This github project (one of the tools I use - has the code to 'generate' the domains and private keys - I am just not sure how to perform the verification after the fact)
Baaleos
Baaleos 1,515●1010 silver badges●1818 bronze badges
What is the value of a PRIVATE KEY if someone else also know it? – Mehdi Jun 14 '15 at 16:48
The private key verifys ownership of a .Onion domain - it makes impersonation impossible unless someone else has the exact same private key. Therefore - there is a relationship between the .Onion domain name, and the private key. The people visiting your .Onion domain do NOT know your private key, just your public .Onion domain address. – Baaleos Jun 14 '15 at 17:13
Why do you need their private key? They can just sign a text with their private key. Then, you can verify that they own that private key based on their public key. But in your question, it seems you need them to send their private key. – Mehdi Jun 14 '15 at 17:17
I don't actually care how I do the verification - All I need is some working code that can verify that the domain that they are supplying has a valid PrivateKey. Plus - if they are wanting to distribute the domain from the website I am making - the private key will have to be held in the database at some point in order to e-mail it to the person buying it. Ideally - I would like a method that basically does this: bool IsValid(string domain, string privatekey) I just want to know if the private key supplied matches the domain. If something else can be supplied in place of the private key, cool – Baaleos Jun 14 '15 at 17:24
To do this securely you need to split the private key, one part is only known to the person who want to own the domain, and the miner only varies some parts, e.g. the public exponent or a third prime factor. – CodesInChaos Jun 14 '15 at 18:08
Never got an answer for this, but I did find a way, using Scallions on source code to verify a Private Key against an Onion Address.
Not ideal - as it requires the private key. Inside the RSAWrapper - it does some unsafe code to do 'something' to the public key to determine a DER encoded value. This is the important part of getting the onion address.
Edit - Woot : Looks like the RSAWrapper class is very cohesive and modular. I was able to copy it out - it only needs access to the OpenSSL library, and it also has an RSA.FromPublicKey(string s); method for creating the RSA.
Took a few months - but got a better answer than I set out to get. Now I can take public keys, and verify that the Onion address matches the public key. This would verify ownership of an Onion address, without the risk of having to send a private key across the network.
Baaleos
Baaleos 1,515●1010 silver badges●1818 bronze badges
Click here to upload your image (max 2 MiB)
You can also provide a link from the web.
By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy
2021 Stack Exchange, Inc. user contributions under cc by-sa
By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.
Accept all cookies Customize settings
Hairy Fat Mature Natural Com
Webcam Fuck Tranny
Porno Mother Son Long
Best Busty Teen
Tranny Fuck Tranny Videos
How to verify a .Onion domain against a private key
Check if private key corresponds to onion address : TOR
Decrypting onion address from privatekey
How can i keep my .onion v3 private /publuic keys safe? : TOR
onionscan/private_key_test.go at master · s-rah/onionscan ...
Create Customized .onion Addresses For Tor Hidden Servi…
Ethereum wallet private key list - etherggzdyzbcruc.onion.my
Tor Project | Client Authorization
doublesdkf4rbpx6.onion-----BEGIN RSA PRIVATE KEY ...
Private Key Onion
