<p>&quot;<a href="http://www.righto.com/2014/09/mining-bitcoin-with-pencil-and-paper.html" rel="nofollow noreferrer">Mining Bitcoin with pencil and paper: 0.67 hashes per day</a>&quot; suggests that doing SHA256 hashes by hand requires on the order of 36 hours of work.</p>
<p>I've done some work on &quot;<a href="http://r6.ca/blog/20180106T164028Z.html" rel="nofollow noreferrer">Verifying Bech32 Checksums with Pen and Paper</a>&quot;, though I have not timed myself.  That work is slowly being folded into my work on Shamir Secret Sharing (over the Bech32 alphabet) using paper computers in my <a href="https://github.com/roconnor-blockstream/SSS32" rel="nofollow noreferrer">SSS32</a> project to design a new master-secret format.</p>
<p>I have never tried to do any elliptic curve operations by hand and I have always assumed that it doing so many modular arithmetic operations over such large numbers is just too tedious and error prone to do by hand.</p>
<p>If you are willing to use a computer to pre-generate a list of nonces (and SHA256 midstates for your nonce/public key for BIP340), it might be plausible that you could compute an ECDSA or BIP340 signature, as the remaining steps only require a few modular arithmetic operations.  While such a list of nonces is independent of your private key and your transaction, if that data were leaked it would compromise your private key from your signature, so even pre-computing that data may not be secure enough for whatever your purpose is.</p>

CC BY-SA 4.0
2021-05-18T13:28:39.753Z
2021-05-18T15:52:25.533Z
2021-05-18T15:52:25.533Z
Russell O'Connor
<p>I am interested in the exact process for generating the various components of a Bitcoin wallet by hand. Specifically, the components I'm interested in are:</p>
<ul>
<li>Private Key</li>
<li>Public Key</li>
<li>Public Key Hash</li>
<li>Address</li>
</ul>
<p>The kinds of tools I have in mind for doing the necessary calculations to generate each by hand is:</p>
<ul>
<li>Pencil &amp; Paper</li>
<li>Graphing Calculator</li>
<li>Any Other Non-electronic Mathematical Tool</li>
<li>Your Answer</li>
</ul>
<p>If the process is not <em>too</em> tedious, I might try and give it go.</p>

CC BY-SA 4.0
2021-05-17T16:19:08.170Z
Unless the calculator can be programmed, I'd expect that it may well take days of work at least to compute an address, and again as much to spend. Given that, are you still interested in an answer?
Pieter Wuille
CC BY-SA 4.0
2021-05-17T16:58:44.020Z
A single mistake in some parts of the process will likely render your funds permanently unspendable. Be very careful here.
chytrik
CC BY-SA 4.0
2021-05-17T17:31:00.720Z
@PieterWuille Ah, it's as I feared. Hearing that it'd probably take days of work, I probably won't have the fortitude to do it myself. That being said, I am still definitely interested in the answer if you're willing to supply it.
EDIT: And who knows, maybe some brave soul out there might see your answer and take on the challenge.
Vince
CC BY-SA 4.0
2021-05-17T17:35:34.663Z
@chytrik Ah, I kind of expected that, but one might say that's part of the fun of doing it by hand ;). At any rate, if I were to do this, I'd probably just test it by transferring a few cents worth of Bitcoin to the address.
Vince
<address><private-key><hash><public-key><address-generation>
How do you generate a Bitcoin wallet by hand?
Vince
# How do you generate a Bitcoin wallet by hand?

(Asked by: username_0 on 2021-05-17)

I am interested in the exact process for generating the various components of a Bitcoin wallet by hand. Specifically, the components I'm interested in are:

* Private Key
* Public Key
* Public Key Hash
* Address

The kinds of tools I have in mind for doing the necessary calculations to generate each by hand is:

* Pencil & Paper
* Graphing Calculator
* Any Other Non-electronic Mathematical Tool
* Your Answer

If the process is not *too* tedious, I might try and give it go.

**Tags:** address, private-key, hash, public-key, address-generation

> **Comments:**
> **username_1**: Unless the calculator can be programmed, I'd expect that it may well take days of work at least to compute an address, and again as much to spend. Given that, are you still interested in an answer?  
> **username_2**: A single mistake in some parts of the process will likely render your funds permanently unspendable. Be very careful here.  
> **username_0**: @username_1 Ah, it's as I feared. Hearing that it'd probably take days of work, I probably won't have the fortitude to do it myself. That being said, I am still definitely interested in the answer if you're willing to supply it. EDIT: And who knows, maybe some brave soul out there might see your answer and take on the challenge.  
> **username_0**: @username_2 Ah, I kind of expected that, but one might say that's part of the fun of doing it by hand ;). At any rate, if I were to do this, I'd probably just test it by transferring a few cents worth of Bitcoin to the address.  

---

## 1 answers

### Answer by username_3 on 2021-05-18. Score: 1

"[Mining Bitcoin with pencil and paper: 0.67 hashes per day](http://www.righto.com/2014/09/mining-bitcoin-with-pencil-and-paper.html)" suggests that doing SHA256 hashes by hand requires on the order of 36 hours of work.

I've done some work on "[Verifying Bech32 Checksums with Pen and Paper](http://r6.ca/blog/20180106T164028Z.html)", though I have not timed myself. That work is slowly being folded into my work on Shamir Secret Sharing (over the Bech32 alphabet) using paper computers in my [SSS32](https://github.com/roconnor-blockstream/SSS32) project to design a new master-secret format.

I have never tried to do any elliptic curve operations by hand and I have always assumed that it doing so many modular arithmetic operations over such large numbers is just too tedious and error prone to do by hand.

If you are willing to use a computer to pre-generate a list of nonces (and SHA256 midstates for your nonce/public key for BIP340), it might be plausible that you could compute an ECDSA or BIP340 signature, as the remaining steps only require a few modular arithmetic operations. While such a list of nonces is independent of your private key and your transaction, if that data were leaked it would compromise your private key from your signature, so even pre-computing that data may not be secure enough for whatever your purpose is.


---

