Author

Topic: [ESHOP launched] Trezor: Bitcoin hardware wallet - page 169. (Read 966173 times)

hero member
Activity: 994
Merit: 507
Trezor does not store a single address, so no single address can be imported. Trezor stores master seed for deterministic wallet hierarchy.
I don't think anyone is asking for private key import.  What they want is have the BTC swept from the entered private key on to the next available address in the deterministic sequence of the Trezor.  Once the sweep is complete then the imported private key is thown away.
Exactly, but you have to type it in somewhere so it can be signed so it can be moved.
full member
Activity: 120
Merit: 100
Trezor does not store a single address, so no single address can be imported. Trezor stores master seed for deterministic wallet hierarchy.
I don't think anyone is asking for private key import.  What they want is have the BTC swept from the entered private key on to the next available address in the deterministic sequence of the Trezor.  Once the sweep is complete then the imported private key is thown away.

Hmm, I did not think about it this way. This is of course doable, but it would require new interface, because it does not fit any current Trezor interface + input of such private key is not implemented. Personally, I prefer not having another interface which will be used by one of the thousand users once. (security) expert who has a paper wallet should have thought through how he is going to spend coins from his paper. Non-experts will never use this. Implementing this thus gives nothing to the masses. There are more important milestones to achieve than polluting Trezor interface with stuff almost nobody would use.
legendary
Activity: 1386
Merit: 1097
But what is the advantage of entering the key into trezor instead of directly into the web interface. Once the whole key is entered the address is sweapt within seconds (I assume) so even if an attacker was infiltrating the PC, no harm could be done.

Well, considering highly specialized malware for stealing sweeping private keys to Trezor; such malware can disconnect Trezor just at time when it detects private key entered to UI. Then there's enough time (few seconds are actually enough) to send such private key to remote server and let it sweep all balance. Not very likely, yet possible.

However me and stick had some brainstorming about sweeping private keys and although it's not very comfortable, we came with a solution which might satisfy paranoid users. It won't be worth a hassle for small amounts, rather for people sweeping their lifetime savings to Trezor.
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
Am I wrong?

Yes, you are wrong. The moment you give your private key away, the malware might be faster than your intended software doing the sweep. Example: malware monitors all text inputs for Bitcoin addresses and when it sees one it immediately uses it. Your software waits until you press Enter. :-)

So people finally realized that paper wallets are fine until one wants to actually spend them?  Tongue

That is a valid point. I might start using honey pots for importing now too :p
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
So people finally realized that paper wallets are fine until one wants to actually spend them?  Tongue

Well, not really Wink

It is just very complicate/much work to do. Using a cold PC to prepare a transaction and then broadcast it would be 100% safe (if no errors were made) but still, not very convenient.
sr. member
Activity: 441
Merit: 268
Am I wrong?

Yes, you are wrong. The moment you give your private key away, the malware might be faster than your intended software doing the sweep. Example: malware monitors all text inputs for Bitcoin addresses and when it sees one it immediately uses it. Sweeping software waits for you to press Enter or OK button. :-)

So people finally realized that paper wallets are fine until one wants to actually spend them?  Tongue
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
Trezor does not store a single address, so no single address can be imported. Trezor stores master seed for deterministic wallet hierarchy.
I don't think anyone is asking for private key import.  What they want is have the BTC swept from the entered private key on to the next available address in the deterministic sequence of the Trezor.  Once the sweep is complete then the imported private key is thown away.

But what is the advantage of entering the key into trezor instead of directly into the web interface. Once the whole key is entered the address is sweapt within seconds (I assume) so even if an attacker was infiltrating the PC, no harm could be done.

Am I wrong?
legendary
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
Trezor does not store a single address, so no single address can be imported. Trezor stores master seed for deterministic wallet hierarchy.
I don't think anyone is asking for private key import.  What they want is have the BTC swept from the entered private key on to the next available address in the deterministic sequence of the Trezor.  Once the sweep is complete then the imported private key is thown away.
full member
Activity: 120
Merit: 100
Perhaps direct entry of paper wallets into the Trezor is the most secure method of inputting rather than trying to get a secure channel outside of it.

To enter pure hexa, i.e. 1-9A-F, you need just four keypresses, but for backspace and enter you would need more. The problem is that this does not work for Trezor. Trezor does not store a single address, so no single address can be imported. Trezor stores master seed for deterministic wallet hierarchy. The good news is that this is much better/secure than a single address. The bad news is that your paper wallet cannot be input.

It would be possible to provide entropy using the two buttons. If you did it in binary, it would be just 256clicks. The problem is that human is not good at providing random binary sequences. I think that guessing 256 human provided clicks is really hard, but trust me: The entropy provided by the computer is a better quality. Unless you use dice/coin for each bit. But if you do use coin, the process would take long and no sane person would do it.
hero member
Activity: 994
Merit: 507
Perhaps direct entry of paper wallets into the Trezor is the most secure method of inputting rather than trying to get a secure channel outside of it.

I think I may have even come up with a way to do it with just the 2-buttons and keep number of key presses down to a minimum. I thought of it while thinking about old computer games when I was a kid. Not as simple as typing on a computer but still simple like programming a tv remote perhaps?

Turn them into codes and provide a nice clear cheat sheet:
The Trezor button are L/left and R/right

(I put 4-length codes but I'm sure it's higher, hopefully you can figure out a scheme that keeps the length short)

Backspace:
L L L L  

1 = R R L L
2 = R R R L
....
A = L R L L
..
Z = R L R R

ENTER/EXIT:
R R R R

Then when at the private key entry screen on the Trezor and you can see your progress as you punch in the codes. When they are done they will just start pressing  R. The screen could also provide visual clues as to what x/4 they are on.


It still requires time but at least once someone entered a few they would probably go pretty quick. Better than cycling through every digit.
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
First batch of TREZORs from eshop orders are on their way to happy owners! ;-)

Mine was shipped too. Where there any first editions in that orders? Wink

nope Smiley

It was a long shot anyway.

I am actually very pleased with the speed of the order processing! Good job guys.
cor
full member
Activity: 121
Merit: 100
First batch of TREZORs from eshop orders are on their way to happy owners! ;-)

Mine was shipped too. Where there any first editions in that orders? Wink

nope Smiley
sr. member
Activity: 427
Merit: 251
- electronics design|embedded software|verilog -
First batch of TREZORs from eshop orders are on their way to happy owners! ;-)

Ordered one today, now in transit already:)

On Aug. 4, 2014, 11:44 a.m.: Order created
On Aug. 4, 2014, 12:21 p.m.: Payment of 0.2032 BTC received.
On Aug. 4, 2014, 12:35 p.m.: Order being processed
On Aug. 4, 2014, 7:24 p.m.: Order shipped with tracking number RRxxxxxxxxx
legendary
Activity: 1386
Merit: 1097
Mine was shipped too. Where there any first editions in that orders? Wink

No Sad. We still have few First edition replacement pieces for RMA purposes and we'll eventually offer them for sale, too. But not yet.
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
First batch of TREZORs from eshop orders are on their way to happy owners! ;-)

Mine was shipped too. Where there any first editions in that orders? Wink
legendary
Activity: 1722
Merit: 1217
Would anyone consider selling me a first edition metal trezor still in the package? If so pm me.

I know someone who still has it mint, I guess. I don't have contact details, but will ask him to contact you on the next bitcoin meetup. he always is present there Smiley

Thanks!
legendary
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
Would anyone consider selling me a first edition metal trezor still in the package? If so pm me.

I know someone who still has it mint, I guess. I don't have contact details, but will ask him to contact you on the next bitcoin meetup. he always is present there Smiley
legendary
Activity: 1050
Merit: 1004
First batch of TREZORs from eshop orders are on their way to happy owners! ;-)

Just got the tracking number as well! Thank you.
newbie
Activity: 26
Merit: 0
Woohoo... got my tracking number!  Smiley  Looking forward to this. Thanks for all your hard work on this guys!
legendary
Activity: 1386
Merit: 1097
First batch of TREZORs from eshop orders are on their way to happy owners! ;-)
Jump to: