Secure Element in Hardware Wallets - page 6.

Quote from: dkbit98 on December 28, 2020, 08:12:23 AM

I see many people talking about Secure Element in hardware wallet ...

Hey,
First of all, I would like to thank you for this great topic. It's really important to have such an overview while considering a hardware wallet.
May I ask you to add our product ?

It's called Satochip, based on a smart card, this hardware wallet is open source and build on the NXP JCOP interface.

Here are the specifications:

☵

Name

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: SFR10 on August 17, 2021, 09:01:10 AM

Thanks buddy for helping and for wonderful work with this table!
I checked everything, made few small corrections, updated first post and it looks much better than my old frankenstein list Cheesy

I tried making my own table but I always messed up thing when creating new lines, so maybe I will contact you in again in future for small assistance.

PS
No merits, as you requested Wink

☵

Name

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: dkbit98 on August 17, 2021, 07:00:01 AM

is there anyone who can help me to create simple table form and improve my first post to list all hardware wallets and secure elements?
^~Snipped~

I can help you with that part but I'd like to request not meriting my post for a code that it's just an alteration of what you already have posted in this thread.
^{- The credit part is more than enough}

I'll post it here...

Update:
^{- Kindly double-check ^{[especially towards the end]}.}

Code:

[center][table]

[tr]
[td][/td][td][size=12pt]☵[/size][/td]
[td][center][u][size=12pt][b]Name[/b][/size][/u][/center][/td][td][size=12pt]☵[/size][/td]
[td][center][u][size=12pt][b]Open Source[/b][/size][/u][/center][/td][td][size=12pt]☵[/size][/td]
[td][center][u][size=12pt][b]Secure Element[/b][/size][/u][/center][/td][td][size=12pt]☵[/size][/td]
[td][center][u][size=12pt][b]Type/Model of SE[/b][/size][/u][/center][/td][td][size=12pt]☵[/size][/td]
[td][center][u][size=12pt][b]Evaluation Assurance Level[/b][/size][/u][/center][/td][td][size=12pt]☵[/size][/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/trezor]Trezor[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=red]NO[/color] [sup][planned for 2022][/sup][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://shapeshift.com/keepkey]Keepkey[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/Blockstream/Jade]Jade[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/Coldcard]ColdCard Mk3[/url][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center]Microchip [b]ATECC608A[/b][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/digitalbitbox]Bitbox02[/url][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center]Microchip [b]ATECC608A[/b][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/Foundation-Devices]Passport[/url][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center]Microchip [b]ATECC608A[/b][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/LedgerHQ]Ledger[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]ST31H320[/b] and [b]ST33J2M0[/b][/center][/td][td]▮[/td]
[td][center]EAL5+/EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://dcentwallet.com/products/BiometricWallet]D'CENT[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]NXP P60[/b][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.safepal.io/]Safepal S1[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=red]Unknown chip[/color][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.coolwallet.io/]CoolWallet S[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center]Microchip [b]NXP P5CD081[/b][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.coolwallet.io/coolwallet_pro]CoolWallet Pro[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center]Microchip [b]NXP J3R110[/b][/center][/td][td]▮[/td]
[td][center]EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://jubiterwallet.de/]Jubiterwallet[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]Infineon[/b][/center][/td][td]▮[/td]
[td][center]EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://kasseusa.com/]Kasse HK-1000[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]ST31H320 A03[/b][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.keevowallet.com/]Keevo[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]Infineon Optiga Trust-P[/b][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://secuxtech.com/]Secux[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]Infineon CC[/b][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.ngrave.io/products/zero]Ngrave[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]STM32MP157C[/b] with [color=red]unknown[/color] built-in SE[/center][/td][td]▮[/td]
[td][center]EAL7+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://tangem.com/]Tangem[/url][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]Samsung SecureCore[/b] microchip[/center][/td][td]▮[/td]
[td][center]EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://imkey.im/]ImKey[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]Military-grade CC security[/b] chip[/center][/td][td]▮[/td]
[td][center]EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://wooko.ng/]Wookong[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=red]Unknown chip[/color][/center][/td][td]▮[/td]
[td][center]EAL4+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.gethashwallet.com/]Hashwallet[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]Infineon SLE78[/b][/center][/td][td]▮[/td]
[td][center]EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.opolo.shop/]Opolo[/url][/center][/td][td]▮[/td]
[td][center][color=red]NO[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]NXP[/b][/center][/td][td]▮[/td]
[td][center]EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://shop.onekey.so/products/onekey-x1-adapted-to-android-ios-to-be-updated]OneKey[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]HSC32I1[/b][/center][/td][td]▮[/td]
[td][center]EAL6+*/EAL 4+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://hyperpay.tech/hypermatepro/pro]HyperMate[/url][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]Infineon[/b][/center][/td][td]▮[/td]
[td][center]EAL6+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/CoboVault][s]CoboVault[/s][/url][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center](FIPS 140-2) probably [b]MAX36010-BSN-T[/b][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://github.com/KeystoneHQ]KeyStone[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]ARM Cortex-M0[/b][/center][/td][td]▮[/td]
[td][center]EAL5+[/center][/td][td]▮[/td]
[/tr]
[tr]
[td][/td][td]▮[/td]
[td][center][url=https://www.keypal.pro/]KeyPal[/url][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[td][center][color=green]YES[/color][/center][/td][td]▮[/td]
[td][center][b]NXP MCU[/b][/center][/td][td]▮[/td]
[td][center]N/A[/center][/td][td]▮[/td]
[/tr]
[/table]
[/center]

Update 2:

Quote from: dkbit98 on August 17, 2021, 11:03:56 AM

Thanks buddy for helping and for wonderful work with this table!
I checked everything, made few small corrections, updated first post and it looks much better than my old frankenstein list Cheesy

I tried making my own table but I always messed up thing when creating new lines, so maybe I will contact you in again in future for small assistance.

You're very welcome, I'm glad I could help

^{Sure, feel free to contact me if you need more assistance.}

Btw, thank you for the credit part ^{[I appreciate it]}

dkbit98

legendary

Activity: 2212

Merit: 7064

I am not great in making forum tables so.... is there anyone who can help me to create simple table form and improve my first post to list all hardware wallets and secure elements?
This should ideally have 5 sections, hardware wallet name, wallet Open Source YES/NO section, Secure Element YES/NO section, Type and model of secure element section, EAL Evaluation Assurance Level setion.
Anyone who help me with this task will be rewarded with some merits and he will be credited for his work.
You can write in this post or contact me with PM.

zyobum

newbie

Activity: 2

Merit: 1

I see, Thanks.

BTW, the link comes from the organization that runs the "Common Criteria" certification program:
https://www.commoncriteriaportal.org/products/

There is a button in the menu "download CSV" redirect to the link I posted.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: zyobum on July 29, 2021, 06:26:18 AM

Not sure about the CC EAL 7 certification of NGRAVE.
I was not able to find the certification here: https://www.commoncriteriaportal.org/products/certified_products.csv

I don't know what kind of ''holy grail'' csv file you are showing us here, but Ngrave hardware wallet is not officially released yet, you can only pre-order it, so it's normal that secure element is not revealed and we don't know exact certification level.
Only information we have is from their website claiming they have CC EAL7 certification.

Quote

Certification Level CC EAL7, CE, RoHS, FCC
MPU 2019 STM32MP157C (High Performance Dual-core ARM® Cortex®-A7 including ARM® NEON and ARM® Trustzone® + ARM® Cortex®-M4 with FPU/MPU) with Secure Boot, Secure RAMs, Secure RTC, Active Tamper and Trustzone® Peripherals, Cortex M4 Resources Isolation. Ultra low power consumption.
SE State-of-the-Art Secure Element

https://www.ngrave.io/products/zero

zyobum

newbie

Activity: 2

Merit: 1

Not sure about the CC EAL 7 certification of NGRAVE.
I was not able to find the certification here: https://www.commoncriteriaportal.org/products/certified_products.csv

dkbit98

legendary

Activity: 2212

Merit: 7064

List is updated with KeyStone Hardware wallet that have EAL5+ certification and 32-bit ARM Cortex-M0 secure element, like they announced on their github page with datasheet document.
KeyStone wallet is almost identical with Cobo Vault that stopped with production of their hardware wallet, and main developer with his team created new company with same components and few improvements.
I am not sure this is the best choice for secure elements, as similar cheap Cortex-M0 STM chips are often used as regular processors and not as secure elements, and Keystone is still hiding exact model they are using.
Ledger for example is using non-secure STM32 Cortex-M processor is combination with secure element ST31H320, and other hardware wallets are doing something similar.

Quote

Keystone's Secure Element is a 32-bit security microcontroller, which is specifically targeted at low-cost and low-power fields. The Secure Element is an ARM Cortex M0 microcontroller integrated with a variety of secure cryptographic modules, including the SM1, SM2, SM3, SM4 algorithm, as well as RSA/ECC, DES/3DES, AES128, AES192/256, SHA1/256, SHA384/512 and other internationally recognized security algorithms. It supports true random number generation (TNRG). The Secure Element provides a variety of peripheral interfaces: USB2.0 full speed, SPI, UART, ISO7816, I2C, etc. built-in ROSC, and also supports crystal-free applications.

Keystone's Secure Element has a 256K byte on-chip eFlash, 16K bytes of ROM, 16K bytes of on-chip SRAM, and 4K bytes of dedicated SRAM algorithm, of which on-chip ROM provides various algorithm interface programs for developers. It improves the development efficiency and optimizes system performance.

https://github.com/KeystoneHQ/Keystone-developer-documents/blob/main/se/Keystone_Secure_Element_Datasheet.m

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: Rath_ on June 14, 2021, 06:54:49 AM

A few days ago, Tropic Square confirmed that their chip is expected to be available somewhere in 2022 and there doesn't seem to be any major problems which could delay the release. Still, I would not expect a new Trezor hardware wallet before 2023.

Great news and they commented that goal for them is to release it in 2022 and that Secure Element will be available for everybody and not just for hardware wallets.
As Ledger collected bunch of money in their latest fundraising it would be interesting to see if they join this race of developing their own open source alternative, or they will continue to waste more time and money on supporting altcoins.
Hardware wallet wars are just getting started Cool

Rath_

legendary

Activity: 1876

Merit: 3132

Quote from: Max_Headroom on May 09, 2021, 10:03:07 AM

That sounds great, I maybe going to buy a Trezor because of it..
Any news about it?

dkbit98

legendary

Activity: 2212

Merit: 7064

List is updated with two new hardware wallets HyperMate G and HyperMate Pro, both of them are using the same Infineon secure element with EAL 6+ certification but exact model is not stated on their website.
HyperMate is company from China but Infineon is German semiconductor manufacturer and their secure elements are also used in other hardware wallets like Jubiterwallet, Keevo, Secux and Hashwallet.
HyperMate is using Infineon chip in combination with Nordic BLE Chip, and interesting thing is that OLED screen of their hardware devices is directly connected with Secure Element to avoid middleman attacks.

https://hyperpay.tech/hypermatepro/pro

dkbit98

legendary

Activity: 2212

Merit: 7064

New hardware wallet model CoolWallet Pro introduced new Secure Element J3R110 that has higher evaluation assurance level EAL6+ compared with their older model CoolWallet S, and this chip is often used in smart cards.
I don't see any big improvements or changes and this wallet still remains closed source, so I would look for other alternatives.

Max_Headroom

jr. member

Activity: 36

Merit: 10

Quote from: dkbit98 on May 09, 2021, 10:20:03 AM

but important thing is they have required funding of 4 million euros.

It reminds me professor Andrew S. Tanenbaum about European grants for developing a new tech Grin

Sounds like the market price in 2014 plus inflation

Andrew S. Tanenbaum: The Impact of MINIX (~ 6 minutes 50 seconds)
https://youtu.be/86_BkFsb4eI?t=386

Cheesy

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: Max_Headroom on May 09, 2021, 10:03:07 AM

That sounds great, I maybe going to buy a Trezor because of it.. Grin

Any news about it? Information like what FPGA development board? what Hardware Description Language plataform etc..

Don't expect to see this new Trezor hardware wallet released before late 2022, and I listened to one podcast with Trezor team explaining that it's technically nearly impossible to make 100% open source chip so fast,
and final product will have to wait, but important thing is they have required funding of 4 million euros.
Maybe you can learn more about it from this podcast with Vlad Costea and Slush, and follow @tropicsquare twitter channel for more news:
https://bitcoin-takeover.com/s8-e8-slush-on-trezor-and-tropic-square/

Max_Headroom

jr. member

Activity: 36

Merit: 10

Quote

**Trezor is working on their own fully open source Secure Element chip and they started separate project for this purpose called Tropic Square.

That sounds great, I maybe going to buy a Trezor because of it.. Grin

Any news about it? Information like what FPGA development board? what Hardware Description Language plataform etc..

Just curious ..

dkbit98

legendary

Activity: 2212

Merit: 7064

List of secure elements is updated with new hardware wallet OneKey with HSC32I1 secure element, they claim it's EAL 6+ certified, however on hsec website I found this chip is EAL 4+ certified.
Interesting thing about this chip is that it is made for Huawei after United States imposed a ban on their devices, so Hongsi Electronics created fully compatible clone to replace ATSHA204A chip, using same SHA-256 algorithm with few more added.
OneKey wallet is using HSC32I1 as secondary chip used for holding secrets, along with their main STM32 chip.

Pmalek

legendary

Activity: 2730

Merit: 7065

According to the article, TASSIC is expected to be used in Trezor devices, meaning the company is looking to completely change their security concept. Getting rid of the seed extraction vulnerability with physical access to Trezor hardware wallets will be achieved in this way. Only time will tell if the approach of having a publicly available codebase for the secure element was the right decision. I hope the chip will be tested thoroughly even if it means extending the ETA. We certainly don't need new bad press in the hardware wallet department. I also expect it to be a more expensive device compared to hardware wallets with older chips.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: Coin-Keeper on March 23, 2021, 02:47:41 PM

That really sounds good to me!

Yes and according to recent news Tropic Square received 4 million euros from Swiss company Auzera for creating first ever open source security chip TASSIC that should be released by the end of 2022.
This is a game changer for sure and I hope other manufacturers will follow them because it's always good to have healthy competition.

DaveF

legendary

Activity: 3500

Merit: 6320

Crypto Swap Exchange

Quote from: bob123 on March 24, 2021, 08:49:36 AM

...
When we are talking about Chips or Microchips we are actually already talking about a set of components, all the time.

Exactly what I was thinking. Much like what I was saying is that someone took an established CPU design and then just added what you would normally see elsewhere on a board and combined it all onto 1 die package. Made for a smaller board and only put on what they needed.

-Dave

Pages:

Bitcoin Forum>Bitcoin>Development & Technical Discussion>Wallet software>Hardware wallets

Jump to:

Topic: Secure Element in Hardware Wallets - page 6. (Read 3419 times)