Bitcoin Forum
December 15, 2024, 11:24:00 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 ... 265 »
  Print  
Author Topic: [ESHOP launched] Trezor: Bitcoin hardware wallet  (Read 966230 times)
slush (OP)
Legendary
*
Offline Offline

Activity: 1386
Merit: 1097



View Profile WWW
December 12, 2012, 04:25:21 PM
 #221

There was a quick discussion on IRC about how to handle the case where malicious software sends a super high fee transaction to the device for signing and then uses the fees to steal the money. The difficulty of verifying the fee without having the host send all depended-upon transactions was mentioned.

Device stores variable of highest acceptable fee per kB, so transaction with higher fee will be rejected. This will have some reasonable amount pre-setted from factory, but there'll be an API to change it's value if bitcoin fees become bigger than this limit (of course the change will show warning message on the display and will ask for confirmation by hw buttons).

Quote
Does the device have any internal storage? What you could do is integrate the block chain sync process with talking to the device. As relevant transactions are discovered they are sent to the device which strips out the values of the outputs and stores them in its internal storage alongside the tx hash. Once all tx outputs have been spent the data can be deleted.

Unfortunately device won't have enough memory to store tx hashes and some other metadata. We're designing the device to have no arbitrary limits for transaction amounts and sizes.

However we're planning to do SPV validation of tx inputs (and storing fixed amounts of checkpoints in the device to speedup the process for next time), so maybe we can somehow use fees from these transactions to approximate this maximum acceptable fee for the future. Thanks for the idea, I'll think about it a bit more.

caveden
Legendary
*
Offline Offline

Activity: 1106
Merit: 1004



View Profile
December 13, 2012, 07:14:28 AM
 #222

There was a quick discussion on IRC about how to handle the case where malicious software sends a super high fee transaction to the device for signing and then uses the fees to steal the money. The difficulty of verifying the fee without having the host send all depended-upon transactions was mentioned.

Device stores variable of highest acceptable fee per kB, so transaction with higher fee will be rejected. This will have some reasonable amount pre-setted from factory, but there'll be an API to change it's value if bitcoin fees become bigger than this limit (of course the change will show warning message on the display and will ask for confirmation by hw buttons).

I'm not sure I understand the issue here. Can't the device simply show both amounts (output + fee), and the user confirms that?
stick
Sr. Member
****
Offline Offline

Activity: 441
Merit: 268



View Profile
December 13, 2012, 08:40:14 AM
 #223

I'm not sure I understand the issue here. Can't the device simply show both amounts (output + fee), and the user confirms that?

To calculate the fee you need to know all of the inputs and their balances, because a fee is not stored in transactions, it is just sum(inputs) - sum(outputs).

chrisrico
Hero Member
*****
Offline Offline

Activity: 496
Merit: 500


View Profile
December 18, 2012, 05:30:39 PM
 #224

Slush, I'm interested in looking at your BIP 0032 implementation. Is the source code somewhere publicly available?
etotheipi
Legendary
*
Offline Offline

Activity: 1428
Merit: 1093


Core Armory Developer


View Profile WWW
December 18, 2012, 06:43:21 PM
 #225

Slush, I'm interested in looking at your BIP 0032 implementation. Is the source code somewhere publicly available?

Btw, I have a BIP 32 implementation in the "newwallet" branch of Armory.  It's only the crypto part -- I haven't been able to integrate it into a new wallet format yet (and thus, not usable in Armory yet).  But it includes the ChildKeyDeriv() source code, and a unit test for both HMAC-SHA512 and the ChildKeyDeriv().

The unit tests may not be entirely accurate, because I made them before sipa decided that all derivations should use compressed public keys.  But the algorithm is otherwise 98% what is described in the BIP.

Founder and CEO of Armory Technologies, Inc.
Armory Bitcoin Wallet: Bringing cold storage to the average user!
Only use Armory software signed by the Armory Offline Signing Key (0x98832223)

Please donate to the Armory project by clicking here!    (or donate directly via 1QBDLYTDFHHZAABYSKGKPWKLSXZWCCJQBX -- yes, it's a real address!)
chrisrico
Hero Member
*****
Offline Offline

Activity: 496
Merit: 500


View Profile
December 18, 2012, 09:34:53 PM
 #226

Slush, I'm interested in looking at your BIP 0032 implementation. Is the source code somewhere publicly available?

Btw, I have a BIP 32 implementation in the "newwallet" branch of Armory.  It's only the crypto part -- I haven't been able to integrate it into a new wallet format yet (and thus, not usable in Armory yet).  But it includes the ChildKeyDeriv() source code, and a unit test for both HMAC-SHA512 and the ChildKeyDeriv().

The unit tests may not be entirely accurate, because I made them before sipa decided that all derivations should use compressed public keys.  But the algorithm is otherwise 98% what is described in the BIP.

Awesome. I was thinking of implementing BIP32 in BitcoinJ mostly as an exercise for myself but also because I have some use for it in mind. I'll take a look at the newwallet branch.
slush (OP)
Legendary
*
Offline Offline

Activity: 1386
Merit: 1097



View Profile WWW
December 18, 2012, 11:25:17 PM
 #227

Btw, I have a BIP 32 implementation in the "newwallet" branch of Armory.

Perfect, I'll take a look!

etotheipi
Legendary
*
Offline Offline

Activity: 1428
Merit: 1093


Core Armory Developer


View Profile WWW
December 22, 2012, 08:29:27 PM
Last edit: December 22, 2012, 08:44:14 PM by etotheipi
 #228

Btw, I have a BIP 32 implementation in the "newwallet" branch of Armory.

Perfect, I'll take a look!


CAVEAT:  BIP 32 is not final yet!

Sipa created some test vectors for latest BIP 32 revision, and I was able to match them in my code.  He's waiting for a response from a real cryptographer before he finalizes it, but at least we've ironed out the intention for BIP 32 and matched our test implementations.  I'm posting here just so anyone else that wants to get a headstart on it can see my unit-tested code, and the test vectors that sipa supplied.  Just don't go implementing this into production software yet!

Here is the unit-test itself, with hard-coded public keys to compare against.
Here is the implementation of ConvertSeedToMasterKey() function, and the ChildKeyDeriv() function implemented in the Armory C++ utilities, matching the latest revision of BIP 32 (as of Dec 22, 2012).

And Here is the output of my test.  It is the same chain displayed twice, all the way up to M/0/1/3/7/15/31/63/127/255/511/1023/2047/4095/8191/16383/32767.  One chain is derived strictly from private keys, the other derived strictly from public keys.  Anyone using this for their own test only needs to look at the first half.

Founder and CEO of Armory Technologies, Inc.
Armory Bitcoin Wallet: Bringing cold storage to the average user!
Only use Armory software signed by the Armory Offline Signing Key (0x98832223)

Please donate to the Armory project by clicking here!    (or donate directly via 1QBDLYTDFHHZAABYSKGKPWKLSXZWCCJQBX -- yes, it's a real address!)
mazi
Newbie
*
Offline Offline

Activity: 33
Merit: 0


View Profile
December 23, 2012, 09:21:05 PM
 #229

Sipa created some test vectors for latest BIP 32 revision, and I was able to match them in my code.  He's waiting for a response from a real cryptographer before he finalizes it, but at least we've ironed out the intention for BIP 32 and matched our test implementations.  I'm posting here just so anyone else that wants to get a headstart on it can see my unit-tested code, and the test vectors that sipa supplied.  Just don't go implementing this into production software yet!

Here is the unit-test itself, with hard-coded public keys to compare against.
Here is the implementation of ConvertSeedToMasterKey() function, and the ChildKeyDeriv() function implemented in the Armory C++ utilities, matching the latest revision of BIP 32 (as of Dec 22, 2012).

And Here is the output of my test.  It is the same chain displayed twice, all the way up to M/0/1/3/7/15/31/63/127/255/511/1023/2047/4095/8191/16383/32767.  One chain is derived strictly from private keys, the other derived strictly from public keys.  Anyone using this for their own test only needs to look at the first half.

I've re-implemented Seed-to-Master-Key and Child Key Derivation functions, and Armory's test for these, in Java. The code is here (in a bitcoinj fork):
http://code.google.com/r/matijamazi-bitcoinj/source/browse/?name=hdw#git%2Fcore%2Fsrc%2Fmain%2Fjava%2Fcom%2Fgoogle%2Fbitcoin%2Fhdw
And the unit tests:
http://code.google.com/r/matijamazi-bitcoinj/source/browse/?name=hdw#git%2Fcore%2Fsrc%2Ftest%2Fjava%2Fcom%2Fgoogle%2Fbitcoin%2Fhdw

This is all very crude and messy at the moment (just the first version where the tests passed), I'll get in shape soon.

Any comments welcome.

BTW, I couldn't find where sipa originally posted the test vectors; is this somewhere public? (I took the test vectors from the Armory code.)
etotheipi
Legendary
*
Offline Offline

Activity: 1428
Merit: 1093


Core Armory Developer


View Profile WWW
December 23, 2012, 09:57:42 PM
 #230

BTW, I couldn't find where sipa originally posted the test vectors; is this somewhere public? (I took the test vectors from the Armory code.)

Sipa didn't want to release them yet until BIP 32 was final.  But after I setup and passed the test vectors, I asked if I could post the code, and he gave approval as long as there was a bold caveat (which I have at the top of that post).

I don't know how long it will be before it's final, so don't get too attached yet (or create production code with it).  It's being reviewed by a real cryptographer, and should be final afterwards, barring any issues with it.

P.S. -- The first CKD test was actually my own test that I came up with before Sipa even had his own implementation.  I meant to remove it, because sipa later came up with his own test vectors and made that previous test kind of pointless.  The outputs that *are* verified are the 17 public keys and the chain of pow(2,i)-1 children.

Founder and CEO of Armory Technologies, Inc.
Armory Bitcoin Wallet: Bringing cold storage to the average user!
Only use Armory software signed by the Armory Offline Signing Key (0x98832223)

Please donate to the Armory project by clicking here!    (or donate directly via 1QBDLYTDFHHZAABYSKGKPWKLSXZWCCJQBX -- yes, it's a real address!)
mazi
Newbie
*
Offline Offline

Activity: 33
Merit: 0


View Profile
December 24, 2012, 03:54:34 PM
 #231

I don't know how long it will be before it's final, so don't get too attached yet (or create production code with it).  It's being reviewed by a real cryptographer, and should be final afterwards, barring any issues with it.

Sure, I wrote this code mainly to see if I understand the BIP 32 correctly, and if can use a little of bitcoinj and ECC in Java.

I won't be surprised if BIP 32 is changed/updated; I'm not a cryptographer but thanke's suggestions and comments in https://bitcointalk.org/index.php?topic=19137.80 make a lot of sense to me.
slush (OP)
Legendary
*
Offline Offline

Activity: 1386
Merit: 1097



View Profile WWW
January 04, 2013, 11:59:28 AM
Last edit: January 04, 2013, 03:58:05 PM by slush
 #232

First successfully CNC'ed and assembled casing! We're waiting for elox, but so far it looks very promising.


jim618
Legendary
*
Offline Offline

Activity: 1708
Merit: 1066



View Profile WWW
January 04, 2013, 12:43:01 PM
 #233

It's a beauty !

:-)

MultiBit HD   Lightweight desktop client.                    Bitcoin Solutions Ltd   Bespoke software. Consultancy.
hazek
Legendary
*
Offline Offline

Activity: 1078
Merit: 1003


View Profile
January 04, 2013, 12:56:57 PM
 #234

Can't wait for this. This is the missing bit in the Bitcoin puzzle for making it useful to the mainstream: ease of use coupled with impenetrable online security.

My personality type: INTJ - please forgive my weaknesses (Not naturally in tune with others feelings; may be insensitive at times, tend to respond to conflict with logic and reason, tend to believe I'm always right)

If however you enjoyed my post: 15j781DjuJeVsZgYbDVt2NZsGrWKRWFHpp
jim618
Legendary
*
Offline Offline

Activity: 1708
Merit: 1066



View Profile WWW
January 04, 2013, 05:06:57 PM
 #235

What design did you go for in the end for the keyring attachment ?

Cannot tell if there is one from the picture.

MultiBit HD   Lightweight desktop client.                    Bitcoin Solutions Ltd   Bespoke software. Consultancy.
slush (OP)
Legendary
*
Offline Offline

Activity: 1386
Merit: 1097



View Profile WWW
January 04, 2013, 11:40:26 PM
 #236

Cannot tell if there is one from the picture.

Heh, now I see the eyelet is hidden behind the casing body. I'll upload next photos soon so eyelet will be visible as well...

paybitcoin
Member
**
Offline Offline

Activity: 85
Merit: 10


1h79nc


View Profile WWW
January 05, 2013, 07:58:07 AM
 #237

That is a sweet case. It is CNC'd aluminum, correct? Very nice finish.
DPony13
Full Member
***
Offline Offline

Activity: 126
Merit: 100



View Profile
January 05, 2013, 08:58:25 AM
 #238

Damn, that's hot.

I'd like to preorder once it's available!!!

EndTheFed123, if you had just taken the money it wouldn't have ended like this Sad
BTW this hasn't been the real DPony13 since he "came back", I just hacked this account, SirLolicon is the real DPony13 I think.
stick
Sr. Member
****
Offline Offline

Activity: 441
Merit: 268



View Profile
January 05, 2013, 09:54:06 AM
 #239

That is a sweet case. It is CNC'd aluminum, correct? Very nice finish.

Yep. CNC'd aluminium with sandblast finish.

BitSyncom
Sr. Member
****
Offline Offline

Activity: 336
Merit: 251

Avalon ASIC Team


View Profile
January 05, 2013, 12:43:51 PM
 #240

Glad someone else has also taken up the hardware route for Bitcoin development and ultimately the road to adoption.

let me know if you guys need anything from China.

Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 ... 265 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!