Offline Wallet stack transactions are encrypted?

Emoclaw

sr. member

Activity: 420

Merit: 251

Quote from: ranochigo on August 05, 2017, 11:29:32 AM

Quote from: damnek on August 05, 2017, 11:23:05 AM

And if I do not have such a computer? Can I store the keys on the flash drive, which I will connect only offline?

If you are talking about a Live USB which you can boot from, then it is more safe. The main problem is probably with rootkit which is persistent to the BIOS but if you're using a Linux distribution (probably), then you are fine. Memory is wiped everytime the ram loses power.

If you are talking about the same scenario as above, then there's no difference with the advice achow gave.

All new motherboards use digital signatures for verification of BIOS images, making it impossible to flash a malicious BIOS. Therefore persistence through the BIOS is not possible unless it's from the manufacturer only. (search: Lenovo rootkit)

Quote from: damnek on August 05, 2017, 11:23:05 AM

Quote from: achow101 on August 03, 2017, 01:30:46 AM

There is a brief window of time where your keys are held unencrypted in memory. If you have a sophisticated virus on your machine that can read your machine's memory, then it can extract the keys from memory and wait until your computer goes back online to send those keys to an attacker. Because of this risk, if you want to have your wallet not be connected to the internet, you should have it on a computer which never has and never will be connected to the internet.

And if I do not have such a computer? Can I store the keys on the flash drive, which I will connect only offline?

No. If the computer has ever been online it could theoretically be infected by that virus, and if you connect it to the internet later after disconnecting your flash drive it could send your extracted private keys. The computer doesn't necessarily have to be online for the virus to work once the computer has been infected.

ranochigo

legendary

Activity: 3038

Merit: 4418

Crypto Swap Exchange

Quote from: damnek on August 05, 2017, 11:23:05 AM

And if I do not have such a computer? Can I store the keys on the flash drive, which I will connect only offline?

If you are talking about a Live USB which you can boot from, then it is more safe. The main problem is probably with rootkit which is persistent to the BIOS but if you're using a Linux distribution (probably), then you are fine. Memory is wiped everytime the ram loses power.

If you are talking about the same scenario as above, then there's no difference with the advice achow gave.

damnek

hero member

Activity: 614

Merit: 500

Quote from: achow101 on August 03, 2017, 01:30:46 AM

There is a brief window of time where your keys are held unencrypted in memory. If you have a sophisticated virus on your machine that can read your machine's memory, then it can extract the keys from memory and wait until your computer goes back online to send those keys to an attacker. Because of this risk, if you want to have your wallet not be connected to the internet, you should have it on a computer which never has and never will be connected to the internet.

And if I do not have such a computer? Can I store the keys on the flash drive, which I will connect only offline?

Meandmyself

newbie

Activity: 3

Merit: 1

Thanks for the answer and advice achow101

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

There is a brief window of time where your keys are held unencrypted in memory. If you have a sophisticated virus on your machine that can read your machine's memory, then it can extract the keys from memory and wait until your computer goes back online to send those keys to an attacker. Because of this risk, if you want to have your wallet not be connected to the internet, you should have it on a computer which never has and never will be connected to the internet.

Meandmyself

newbie

Activity: 3

Merit: 1

Hi

When i have a wallet encrypted and disconnect from the Internet, i do a transfer (goes to stack) and then i reconnect to internet and the transaction is send to the network.
Did my wallet had a moment that was not encrypted for the network, or it does not signalised that because it was always encrypted.
I am asking this because i would like to know if a hacker could acess my wallet during the transaction time or if i am safe because it was always encrypted.
Best regards

Topic: Offline Wallet stack transactions are encrypted? (Read 567 times)