<p>The author of this paper seem to have put some thought into the problem you describe and has proposed a solution that seems relevant to your question:</p>

<p>A new HD wallet that tolerates key leakage
Master key generation. Instead of one master private key, our HD wallet uses
m master private keys ˆd1, . . . ,ˆdm for some reasonably-sized m to be determinedby the requirements of the wallet. (For example, in the combined treasurer-auditor use case of Section 2, m must exceed the number t of departments in the organization.) To keep the master private key size down, these master private keys could be generated pseudorandomly with no loss of security using, say, therudimentary deterministic wallet described in Section 1.*</p>

<p><a href="https://eprint.iacr.org/2014/998.pdf" rel="nofollow">https://eprint.iacr.org/2014/998.pdf</a></p>

CC BY-SA 3.0
2016-05-23T11:27:43.397Z
interesting! thanks. Is that URL persistent enough over time?
knocte
CC BY-SA 3.0
2016-05-23T21:25:52.793Z
I believe it will remain available for the foreseeable future.
Julio
CC BY-SA 3.0
2016-05-23T10:19:16.980Z
2016-05-23T21:24:20.753Z
2016-05-23T21:24:20.753Z
Julio
<p>Using the XPUB key you can generate child public keys (without knowing any private key). Having the XPUB key therefore allows you to calculate the balance in a "read only" manner.</p>

<p>Make sure you understand hardening and the (small) security risk involved when someone knows your XPUB and one of the child private keys.</p>

CC BY-SA 3.0
2016-05-23T13:16:23.563Z
2016-05-23T13:16:23.563Z
Jannes
<p>If I had a non-HD multi-sig wallet, checking the balance of it would be trivial (I would just look at the blockchain to see the address' balance, without the need to hold a key).</p>

<p>However, with HD wallets, a wallet is comprised of N addresses. So knowing the balance of this wallet is not easy unless you are one of the key holders.</p>

<p>Therefore, this is my question: how to know the balance of a multi-sig HD wallet, from a read-only standpoint? Can the distribution of the keys be asymmetric so that there's one key that allows checking the balance but doesn't allow signing?</p>

<multi-signature><bip32-hd-wallets>
Multi-sig N of M where 1 of the keys can see the balance but not spend (read-only key)?
knocte
# Multi-sig N of M where 1 of the keys can see the balance but not spend (read-only key)?

(Asked by: username_0 on 2016-05-23)

If I had a non-HD multi-sig wallet, checking the balance of it would be trivial (I would just look at the blockchain to see the address' balance, without the need to hold a key).

However, with HD wallets, a wallet is comprised of N addresses. So knowing the balance of this wallet is not easy unless you are one of the key holders.

Therefore, this is my question: how to know the balance of a multi-sig HD wallet, from a read-only standpoint? Can the distribution of the keys be asymmetric so that there's one key that allows checking the balance but doesn't allow signing?

**Tags:** multi-signature, bip32-hd-wallets


---

## 2 answers

### Answer by username_1 on 2016-05-23. Score: 4

The author of this paper seem to have put some thought into the problem you describe and has proposed a solution that seems relevant to your question:

A new HD wallet that tolerates key leakage
Master key generation. Instead of one master private key, our HD wallet uses
m master private keys ˆd1, . . . ,ˆdm for some reasonably-sized m to be determinedby the requirements of the wallet. (For example, in the combined treasurer-auditor use case of Section 2, m must exceed the number t of departments in the organization.) To keep the master private key size down, these master private keys could be generated pseudorandomly with no loss of security using, say, therudimentary deterministic wallet described in Section 1.\*

<https://eprint.iacr.org/2014/998.pdf>

> **Comments:**
> **username_0**: interesting! thanks. Is that URL persistent enough over time?  
> **username_1**: I believe it will remain available for the foreseeable future.  

---

### Answer by username_2 on 2016-05-23. Score: 3

Using the XPUB key you can generate child public keys (without knowing any private key). Having the XPUB key therefore allows you to calculate the balance in a "read only" manner.

Make sure you understand hardening and the (small) security risk involved when someone knows your XPUB and one of the child private keys.


---

