Encrypt and decrypt private key backups using AES-256-GCM with PBKDF2.
npx skills add https://github.com/b-open-io/prompts --skill bitcoin-backup
Please help me install this Agent Skill. Skill: bitcoin-backup Source: https://github.com/b-open-io/prompts/tree/main/user/.claude/skills/bitcoin-backup Command: npx skills add https://github.com/b-open-io/prompts --skill bitcoin-backup
Encrypt and decrypt private key backups using AES-256-GCM with PBKDF2 iterations, to secure WIF keys, identities, and wallet data.
Install:
Encrypt JSON to .bep:
Decrypt .bep:
Upgrade legacy:
High-intent search queries and answers about installing and using this skill.
AES-256-GCM encryption secures private key backups using a 256-bit cipher with authenticated encryption. Use the bbackup CLI tool with your passphrase: `bbackup enc wallet.json -p "passphrase" -o wallet.bep`. The tool applies PBKDF2 key derivation (default 600,000 iterations) with random salt and IV for each backup.
This Skill encrypts and decrypts BapMasterBackup, BapMemberBackup, WifBackup, OneSatBackup, and VaultBackup formats. It handles WIF keys, BAP identities, and wallet data across these formats, and creates encrypted .bep backup files compatible with all supported types.
Decrypt .bep backups by running `bbackup dec wallet.bep -p "passphrase" -o wallet.json`. Provide the same passphrase used during encryption. The tool validates the AES-256-GCM authentication tag and recovers the original backup data.
Yes, legacy backups can be upgraded to current PBKDF2 iteration settings using `bbackup upg old.bep -p "passphrase" -o upgraded.bep`. This re-encrypts the backup with the default 600,000 iterations while maintaining compatibility with all supported backup formats.
PBKDF2 is a key derivation function that stretches your passphrase into a cryptographic key through repeated iterations. This Skill uses 600,000 iterations (configurable) to slow down brute-force attacks, making backups resistant to password guessing while maintaining usable performance.
While PBKDF2 iterations provide computational protection, a strong passphrase remains critical—weak passphrases are vulnerable to dictionary attacks even with high iteration counts. Use passphrases with adequate entropy; the encryption itself is AES-256-GCM, which is cryptographically secure.
b-open-ioManage BAP identity backups with AES-256-GCM encrypted .bep files.
somachakValidate backup coverage and restoration procedures for production platforms.
b-open-ioCreate and manage BAP identities for posting on the Clawbook Network.
ali-masterEncrypt and decrypt sensitive data with AES-GCM and PBKDF2 key derivation.
