Hello folks,
I have read a lot about brain wallets. They sure are intriguing in that you would never have to write anything down that could be discovered by someone else. They are also inherently unsafe in that the passphrase can be brute forced, rainbowed, dictionaried, etc. I did a little expedition, and found a number of brain wallets, by trial and error:
1. The Merkle Root hash of the Genesis Block creates a valid address that has been funded in the past
2. The secret message in the Genesis Block "The Times 03/Jan/2009 ....." also creates a valid and funded address
3. Satoshi's name in many variants, mixed case, lower case, including/excluding blanks leads to many brain wallets
4. "Dread Pirate Roberts" leads to a brain wallet
5. "it was the best of times it was the worst of times" leads to a valid brain wallet
6. bitaddress.org has a vanity address 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN - it will lead to a valid brain wallet address
7. "to be or not to be" has a valid address.
There is a good piece on why not to use brain wallets
http://fc16.ifca.ai/preproceedings/36_Vasek.pdfhowever, I can think of ways to improve security and still benefit from the convenience.
1. Create a phrase you are able to remember, for example: "Al Gore invented the Internet and that's an inconvenient truth."
2. Send this through an independent SHA256 generator with a SALT phrase of : "We consume too much NACL."
3. Take the resulting hash as an input for generating your brain wallet address.
Challenge me ;-)