“I must, sadly, withdraw my endorsement of Yubikey 4 devices”

Re:“I must, sadly, withdraw my endorsement of Yubikey 4 devi... by droffel on Friday May 13, 2016 @02:48PM (#11692397)

Not necessarily true, you can do it with just a display (and two buttons) like the Trezor does[1]. You can probably even omit the buttons using this model:

1. Send message to sign over the wire

2. Display message to sign on the device's screen

3. Send a message to continue or reject over the wire

4. Device displays scrambled pinpad

5. User enters PIN on the compromised computer, using a blinded pinpad (like the Trezor)

6. The blinded PIN is sent over the wire to the device

7. The device verifies the PIN, and if correct, signs the message displayed in step 2

8. The signed message is sent over the wire to the compromised device

[1] https://doc.satoshilabs.com/trezor-user/enteringyourpin.html

[ Parent | on HN ]

Re:“I must, sadly, withdraw my endorsement of Yubikey 4 devi... by j_s on Friday May 13, 2016 @06:13PM (#11693539)

I am curious about hardware Bitcoin wallets, because transferring from an address reveals the public key. Do hardware wallets like Trezor do single-use addresses?

[ Parent | on HN ]

Re:“I must, sadly, withdraw my endorsement of Yubikey 4 devi... by droffel on Friday May 13, 2016 @06:35PM (#11693631)

Hardware wallets use the BIP32[1] spec to implement "Hierarchical Deterministic" (HD) addresses. Using a single seed phrase (stored internally on the device, and also written down external to the device, neither copy should ever be online), you can generate an infinite number of addresses for your wallet. Every time you request a payment, you get a different address to send to, there is no address reuse (unless you or someone else chooses to send funds to an address that has already been spent from).

[1] https://github.com/bitcoin/bips/blob/master/bip-0032.mediawi...

[ Parent | on HN ]