Bitcoin Forum
November 11, 2024, 02:56:23 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Shamir scheme backup like BIP39. And the Bitcoin Trezor supporting?  (Read 703 times)
Perlover (OP)
Full Member
***
Offline Offline

Activity: 162
Merit: 109


View Profile
June 03, 2016, 11:04:40 PM
Last edit: June 03, 2016, 11:23:44 PM by Perlover
 #1

Hi everybody,

I have idea. I don't know - may be there is some draft of BIP. But i will try to write here.

There is BIP39 - mnemonic backup 12-24 words. But there is problem - if somebody will find paper phrases - he will stole all bitcoins.

But Shamir scheme exists. And i don't see normal tools for this. But i am sure that there can be BIP standard for this: mnemonic entropy (seed) to be encrypted in some Shamirs shares (based in seed and type of Shamir's scheme) which are encoded same way as mnemonic sentence (each 11 bit - one word from same list) but for each shares separately. User writes these words (i don't know which length of each share will be) in each share card and keeps them separately.

But my idea for Satoshi Lab too - to realise may be some BIP and to program its in Trezor. Trezor could be suggest to user to choose - plain backup BIP39 or BIPXX (Shamir). If user choose Shamir backup he should be asked scheme (for example 3/5). For this example the Trezor could be show words for each 5 shares separately and even an infected computer will not know which words are. User can write all shares in one time and will put them to some places. In this realisation will not be vulnerable computers/printers. Only code of Trezor, pen of user. So backup will be more better than BIP39. If he will need to restore - he should enter words in Trezor how he do it know with BIP39 (through computer in order known to Trezor only) for only 3 shares for example (if scheme is 3/5). After this Trezor to restore seed.

What do you think?
Perlover (OP)
Full Member
***
Offline Offline

Activity: 162
Merit: 109


View Profile
June 03, 2016, 11:20:31 PM
 #2

I think the length of Shamir's share will be same as entropy length

For example JavaScript realisation claims it:
https://github.com/amper5and/secrets.js#note-on-security

So if we have 24 words seed then the one card of Shamir's scheme will have 24 words too (with checksum)
slush
Legendary
*
Offline Offline

Activity: 1386
Merit: 1097



View Profile WWW
June 08, 2016, 09:15:20 AM
 #3

For the record, we already done some basic work on this idea: https://github.com/trezor/python-mnemonic/blob/master/mnemonic/shamir.py However it's not finished and it need more thinking & writing specification around it.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!