Re:Ledger Nano X – A Bluetooth-enabled secure device that st...
by mortalkastor on Monday January 07, 2019 @05:52AM
(#18844249)
Disclosure: I'm a dev at Ledger working on the desktop and mobile apps. I'm not in the hardware team nor the security team.
> all the bluetooth, screen and button IO goes through an unsecure processor
On the new device, the screen and buttons are now directly wired to the ST33 secure element
Re:Ledger Nano X – A Bluetooth-enabled secure device that st...
by eis on Monday January 07, 2019 @06:39AM
(#18844425)
This is great to hear. The website did not contain this information from what I could see. Just to clarify: does that mean that the screen and buttons are 100% controlled by the ST33 and do not go through the unsecure chip?
Re:Ledger Nano X – A Bluetooth-enabled secure device that st...
by mortalkastor on Monday January 07, 2019 @07:36AM
(#18844678)
Absolutely.
I'd prefer the "old" model with USB connection because it doesn't give much up in terms of usability but has a considerable upside for security. With Bluetooth all that's needed is a firmware exploit (which is a realistic assumption, we've been there) and an attacker only has to be within range of a few meters. He wont be able to steal the private keys but he'll be able to completely empty any wallets.
Note: the following paragraph might not be true anymore, see below comments.
Keep in mind: all the bluetooth, screen and button IO goes through an unsecure processor which then asks the secure chip to sign something. So exploiting the unsecure part pretty much defeats the whole thing.