Common Terms

Words are Hard

This is a list of terms you might encounter when using the ConfluxPortal interface.

---

Wallet

• The interface / client / wrapper / holder that you use to manage your account(s).
• Example: ConfluxPortal, your Ledger Hardware Wallet, a Multisig Wallet Contract.

Account

• A public & private keypair that "holds" your funds.
• Your funds are actually stored on the blockchain, not in the wallet or account.
• Just like your Reddit account has a username (public) and password (private), so does your Conflux account. For additional security, you can use a password to encrypt your private key which would result in a username (public) and password (private) and password for that password (private + more secure). See the Keystore File section.

Address ("Public Key")

• You use this to send funds to an account.
• Sometimes referred to as the "public key"
• A string base32 address that conforms to CIP-37.
• In conflux the address generated from the same private key on different network (mainnet, testnet) is different.
• Example:
  • On mainnet: cfx:aanmuy405w45gb2kp6xt1bzhvvp7hduj72rvv2vbyu and the verbose one is CFX:TYPE.USER:AANMUY405W45GB2KP6XT1BZHVVP7HDUJ72RVV2VBYU
  • On testnet: cfxtest:aanmuy405w45gb2kp6xt1bzhvvp7hduj72h4cj1nu4 and the verbose one is CFXTEST:TYPE.USER:AANMUY405W45GB2KP6XT1BZHVVP7HDUJ72H4CJ1NU4

Public Key

• In cryptography, you have a keypair: the public and private key.
• You can derive a public key from a private key, but cannot derive a private key from a public key.
• (Advanced) In Conflux, the address "acts" like the public key, but it's not actually the public key.
• (Advanced) In Conflux, the public key is derived from the private key and is 128 hex characters.

Private Key

• You use this to send funds from an account.
• The secret half of your Address / public key.
• A string of 64 hexadecimal characters.
• (Almost) every string of 64 hexadecimal characters is a private key.
• If you hand-type a private key differently today than yesterday, you will access a different wallet. Never hand type your private key.
• This is the string you need to send from your account. Without it you cannot access your funds. Although, you don't need to save this raw, unencrypted private key in this format. You can saving the fancy versions of it (e.g. the Keystore File / Mnemonic Phrase).
• Example: afdfd9c3d2095ef696594f6cedcae59e72dcd697e2a7521b1578140422a4f890

Mnemonic Phrase / Seed Phrase / Seed Words

• Another fancy version of your private key, that is actually used to derive multiple private keys.
• A (typically) 12 or 24 word phrase that allows you to access infinite number of accounts.
• Used by Ledger, TREZOR, ConfluxPortal, Jaxx, and others.
• Originates from BIP 39 Spec.
• The accounts you can access with this phrase are determined by the "path".
• Example 12-words: brain surround have swap horror body response double fire dumb bring hazard
• Example 24-words: card enrich gesture connect kick topple fan body blind engine lemon swarm venue praise addict agent unaware equal bean sing govern income link leg

Hardware Wallet:

• Typically, a single-purpose device that "holds" your private key(s), ensuring your private keys are safe.
• Typically, they use a 24-word phrase. This phrase you should write down (not on your computer) and store separately from your hardware wallet.
• If you lose your hardware wallet, you can still gain access to your accounts & funds via the word-phrase you wrote down.
• Never type the word-phrase on your computer. It defeats the purpose of your hardware wallet.
• See here for more information about Hardware Wallets

Hexadecimal

• Used all over Conflux for a variety of things, a hexadecimal string is comprised of the numbers 0 1 2 3 4 5 6 7 8 9 and A B C D E F

Seed

• The input given to derive a private key. This should always be generated in a truly random way, not something you make up with your measly human brain.
• If you chose the seed, it is known as a brain wallet

Brain Wallet

• An account generated from a seed or password or passphrase of your choosing.
• Humans are not capable of generating enough entropy and therefore the wallets derived from these phrases are insecure.
• Brain wallets can be brute forced by super fast computers.
• Brain wallet are insecure.
• Don't use brain wallets.

Entropy

• Also known as "randomness".
• The more random something is, the more entropy it has, and the more secure it is.
• Usually defined in "bits of entropy" or the number of years it would take to brute-force a ____ (e.g. private key) derived with that much entropy.
• Conflux private keys are 256-bit keys
• 24-Word mnemonic phrases are also 256 bits of entropy. 2048 words in the dictionary. 11 bits of entropy (the words). 11 * 24 = 264. The last word is a checksum.

Derive / Derivation

• To derive something is to obtain it from an original source.
• For example, if we were to derive a Keystore from a private key and a password, this means that the Keystore is made from these two sources.
• The Keystore is a product of the two, thus it is derived from them.

Encryption

• Encryption is the act of taking a string of letters/numbers, like your private key, and turning them into another string of letters/numbers through a method of private translation.
• There are various different encryption methods.
• Encryption offers protection against those trying to steal your information!

Encrypted vs Unencrypted Keys

• An unencrypted private key is 64 characters long, and it is used to unlock or restore wallets.
• An encrypted key is also 64 letters long and is a regular private key that has gone through the process of encryption, as defined above.
• For example, if the world ‘Apple’ was your shortened private key, then it was encrypted three letters down the alphabet, your new shortened encrypted key would be ‘Dssoh’. Since you know the way to encrypt this key, you could derive the original private key from it by reversing the method of encryption.
• Usually encrypted private keys are kept within the extension or device they are encrypted by, and they remain out of sight from the user. This is meant to add another layer of security to keep a user’s wallet information safe.

Decentralize / Decentralization

• The process of transferring authority of a single entity (ex. Government or large corporation) to multiple smaller entities.

Trustless

• A distributed trustless consensus which the blockchain is responsible for. Since everyone has a copy of the ledger of all transactions ever executed, there is no need for a third-party. You can verify the transactions yourself, however the Conflux blockchain and Bitcoin blockchain were created to ensure rules and agreements between all parties are executed when all conditions are met.

Smart Contracts

• A piece of code (or program) that is stored on the blockchain network. Conditions of the contract are predefined by the users, if all conditions are met, certain actions are executed by the contract (program).

Blockchain

• A decentralized publicly owned ledger.

All feedback, rewrites, clarification, typo-fixing, and requests for additions are more than welcome. ?