Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: coastermonger on March 06, 2014, 02:17:08 AM



Title: Increasing hot wallet security by adding decentralized 2-factor
Post by: coastermonger on March 06, 2014, 02:17:08 AM
https://i.imgur.com/BLW4FMr.jpg


Title: Re: Increasing hot wallet security by adding decentralized 2-factor
Post by: BitTrade on March 06, 2014, 07:15:25 AM
I like this idea.  Has anyone attempted to implement it?


Title: Re: Increasing hot wallet security by adding decentralized 2-factor
Post by: trcwhale on March 06, 2014, 07:17:57 AM
This looks very interesting!!!


Title: Re: Increasing hot wallet security by adding decentralized 2-factor
Post by: DeathAndTaxes on March 06, 2014, 07:17:59 AM
Um isn't this exactly how multisig works?

Except the network on the left and right will both be the bitcoin network and the missing piece is a protocol message to relay partially signed transactions.


Title: Re: Increasing hot wallet security by adding decentralized 2-factor
Post by: Parliament on March 06, 2014, 08:49:23 AM
Lucidchart is awesome!

Problem is: everything you're describing is identical to multisig, except that both partially signed and completed transactions are on the same (main) network.

Quote
lets you know when a spend attempt has been made

You could modify a client, or write a monitoring solution to do this.

No need to reinvent the wheel.


Title: Re: Increasing hot wallet security by adding decentralized 2-factor
Post by: DeathAndTaxes on March 06, 2014, 06:39:13 PM
Quote
except that both partially signed and completed transactions are on the same (main) network

that is a potential outcome but currently the existing bitcoin network has no support for partially signed messages.  So today the partially signed messages need to be relayed out of band.  There is nothing that would prevent the protocol from being extended to support a new "PartialTx" message.  It wouldn't even be a hard fork as older nodes would simply ignore them.  There are some potential DDOS and spam concerns.  Current anti-spam rules operate on the assumption that nodes will only relay tx which will eventually confirm (and thus have a cost to the attacker).  An attacker can choose to never complete partially signed messages and thus could spam/attack/degrade the network.   There are some potential solutions but it is a problem which needs to be considered carefully.


Title: Re: Increasing hot wallet security by adding decentralized 2-factor
Post by: Parliament on March 07, 2014, 08:50:09 AM
that is a potential outcome but currently the existing bitcoin network has no support for partially signed messages.

I see, thanks for explaining!


Title: Re: Increasing hot wallet security by adding decentralized 2-factor
Post by: Bitalo_Maciej on March 07, 2014, 08:52:06 AM
Didn't you already post this idea in another thread (https://bitcointalk.org/index.php?topic=503175.0;topicseen)?