[ESHOP launched] Trezor: Bitcoin hardware wallet

[btchip]

I thought about such attack operated by a ransomware - pay me and I'll tell you where your coins are - but it's definitely far fetched. Maybe we should start a new (development) thread to discuss theorical attacks against hardware wallets & smartcards and keep the healthy paranoia there

[stick]

We just sent first small batch of PCBs into production. Can't wait to see the results!

[slush]

So that'd just destroy the money, right? What is the attackers motive? Is it not possible to heuristically detect such shenanigans?

Even sending few thousands coins to /dev/null may be a fun for some people.

However I think I found some workaround for this. Device can enforce the rule, that change address (that address used in transaction output, but going back to the same wallet) can be just few indexes in every direction far away from some already used address (confirmed by SPV validation). By enforcing this rule, the space is drastically reduced and clients can make lookups for such change addresses, so the chance to lost coins by such attack is minimal.

[jim618]

On the desktop software front, I think I should have some free time in February to start work on Trezor integration.
It would be good to get started on the code that talks via USB.
Are the RaspPi shields with the emulator available now ?

They don't have to be a 100% faithful emulation yet - I just want something 'at the other end' of the USB to start talking to.

[stick]

On the desktop software front, I think I should have some free time in February to start work on Trezor integration.
It would be good to get started on the code that talks via USB.
Are the RaspPi shields with the emulator available now ?

We should have first RasPi shields in our hands in a week or too. Then we have to perform some tests. Please, send your address to slush as PM, so we have it, once we are ready to ship! :-)

[jim618]

Great !

Will do. PM sent.
I presume they will be coming to the UK from the Czech Republic - that's where you guys are aren't you ?

There is all the Java BIP32 wallet work to do as well but I figure it is worth derisking the low level communications first.

I do all my dev on a Mac put I think I will pick up a Windows laptop to test hardware compatibility on that too.
80% of my downloads are to a Windows machine so I presume the Trezor usage will be similar.

Jim

[stick]

I presume they will be coming to the UK from the Czech Republic - that's where you guys are aren't you ?

PCBs are made in the Czech Rep as well.

[World]

additional information
http://techcrunch.com/2013/02/04/25-model-a-raspberry-pi-on-sale-in-europe/

[stick]

PCBs for Raspberry Pi (left) and for the Trezor itself (right) arrived yesterday! \o/

[Mike Hearn]

Thanks for the update, exciting! I threw another coin your way. Keep going! Trezor is going to be the key advance that makes Bitcoin more secure than the best available banks.

[cbeast]

Trezor is more than just a bitcoin device. Isn't it really the first stand alone secure digital encryption signature device? It is a prototype of what will one day be a common appliance.

[Grouver (BtcBalance)]

Where can I order one?

[wildraven]

And what would be the price ?

[World]

And what would be the price ?

Price should be around € 100, but it still depends on many factors, what I read on a blog.

[caveden]

Price should be around € 100, but it still depends on many factors, what I read on a blog.

Ouch, that seems a little expensive. I mean, can't you buy old smartphones with that amount? Or perhaps second-hand netbooks that you could format and turn into an offline wallet.

[K1773R]

Price should be around € 100, but it still depends on many factors, what I read on a blog.

Ouch, that seems a little expensive. I mean, can't you buy old smartphones with that amount? Or perhaps second-hand netbooks that you could format and turn into an offline wallet.

if you ask these questions then you didnt understand this project very well.

[caveden]

Price should be around € 100, but it still depends on many factors, what I read on a blog.

Ouch, that seems a little expensive. I mean, can't you buy old smartphones with that amount? Or perhaps second-hand netbooks that you could format and turn into an offline wallet.

if you ask these questions then you didnt understand this project very well.

Well, AFAIK it has two buttons, a low-resolution monochromatic screen, and probably a processor weaker than that of any smartphone. Smartphones have wifi, 3G support, GPS, colored touchscreen with higher resolution, powerful battery etc. There's also the Raspberry Pi: a much more powerful hardware for one quarter of that amount. (OK, I do realize the Raspberry Pi is exceptional in terms of cost/benefits, so this comparison might not be the fairest)

I also understand this won't be produced industrially in China, so we can expect a higher price. But 100€ just seem too much, that's all.

[molecular]

Trezor is more than just a bitcoin device. Isn't it really the first stand alone secure digital encryption signature device? It is a prototype of what will one day be a common appliance.

i don't think that's true. Google for example cryptostick which does pgp signing and encryption afaik

[slush]

i don't think that's true. Google for example cryptostick which does pgp signing and encryption afaik

cryptostick has no display.

[slush]

Smartphones have wifi, 3G support, GPS, colored touchscreen with higher resolution, powerful battery etc.

...and closed source firmware?