Where is the encryptedMnemonic for the Hiro Chrome Extension located at? (File path MAC))

copyrightbreaker · September 15, 2021, 3:14am

I have my encryptedMnemonic and need to sign in with it through the extension to access web apps.

friedger · September 15, 2021, 9:55am

Where did you get the encryptedMnemonic from? You should put it back in that place I guess.

The extension stores the encrypted mnemonic/secret key in local storage:

blockstack/stacks-wallet-web/blob/140963480597217fe689626dd79d6c1402f0617d/src/background/vault.ts#L46


function getHasSetPassword() {
  const persisted = localStorage.getItem(hasSetPasswordIdentifier);
  if (persisted !== null) {
    return JSON.parse(persisted);
  }
  return false;
}
let inMemoryVault: InMemoryVault = {
  ...defaultVault,
  encryptedSecretKey: localStorage.getItem(encryptedKeyIdentifier) || undefined,
  hasSetPassword: getHasSetPassword(),
  salt: localStorage.getItem(saltIdentifier) || undefined,
};
export const getVault = () => inMemoryVault;
function persistOptional(storageKey: string, value?: string) {
  if (value) {
    localStorage.setItem(storageKey, value);
  } else {

copyrightbreaker · September 16, 2021, 5:06am

Well you see I got logged out of the extension but was still logged in on the desktop wallet and since that wallet doesn’t have a place to get the secret key I got the encrypted key from ~/Library/Application Support/so.hiro.StacksWallet/config.json.

Is there a way for me to inject it with the password to receive the secret phrase?

friedger · September 16, 2021, 8:42am

You could try to decrypt the mnemonic directly. You need the salt as well.

Then use argon2 and do something like described here:

github.com

blockstack/stacks-wallet/blob/7caaf3f5e059ef34d94dc0800ccd2629ed8db2e3/app/store/keys/keys.actions.ts#L102


    dispatch(setPasswordSuccess({ salt, encryptedMnemonic, stxAddress: address }));
    history.push(routes.HOME);
  };
}
interface DecryptSoftwareWalletArgs {
  password: string;
  salt: string;
  ciphertextMnemonic: string;
}
export async function decryptSoftwareWallet(args: DecryptSoftwareWalletArgs) {
  const { password, salt, ciphertextMnemonic } = args;
  const { derivedKeyHash } = await main.deriveKey({ pass: password, salt });
  const plaintextMnemonic = await decryptMnemonic({
    encryptedMnemonic: ciphertextMnemonic,
    derivedKeyHash,
  });
  const rootNode = await deriveRootKeychainFromMnemonic(plaintextMnemonic);
  return deriveStxAddressKeychain(rootNode) as {
    childKey: BIP32Interface;
    address: string;

friedger · September 16, 2021, 8:42am

Or you could build a custom desktop wallet that shows the mnemonic. Suitable issue: https://github.com/blockstack/stacks-wallet/issues/920

copyrightbreaker · September 17, 2021, 4:17am

Yeah not at all familiar with typescript or programming much. tried all day to jury rig it but just got errors. Hopefully we get a way to reveal private keys on the desktop wallet.