Bitcoin Forum
March 28, 2024, 07:53:29 PM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Safety of Restoring Armory Unencrypted Digital Backup  (Read 870 times)
Curyous (OP)
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
February 10, 2014, 05:07:45 AM
 #1

I'm testing Armory 0.90 before I use it for cold storage.  When I restored from an unencrypted digital backup, it didn't give me an option to encrypt it, and ended up saving an unencrypted wallet to disk.  Even though I later encrypted the wallet, does it mean that it is now "unsafe" (if you're paranoid) as there is an unencrypted version on my drive somewhere that could be undeleted?
1711655609
Hero Member
*
Offline Offline

Posts: 1711655609

View Profile Personal Message (Offline)

Ignore
1711655609
Reply with quote  #2

1711655609
Report to moderator
1711655609
Hero Member
*
Offline Offline

Posts: 1711655609

View Profile Personal Message (Offline)

Ignore
1711655609
Reply with quote  #2

1711655609
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711655609
Hero Member
*
Offline Offline

Posts: 1711655609

View Profile Personal Message (Offline)

Ignore
1711655609
Reply with quote  #2

1711655609
Report to moderator
1711655609
Hero Member
*
Offline Offline

Posts: 1711655609

View Profile Personal Message (Offline)

Ignore
1711655609
Reply with quote  #2

1711655609
Report to moderator
bitpop
Legendary
*
Offline Offline

Activity: 2912
Merit: 1060



View Profile WWW
February 10, 2014, 09:58:31 AM
 #2

Armory is good about rewriting it's files. But depends on your disk controller.

But you got bigger problems, where was the file from? Did you wipe that? Did Windows cache the file read? Temp files? Page file?

etotheipi
Legendary
*
Offline Offline

Activity: 1428
Merit: 1093


Core Armory Developer


View Profile WWW
February 12, 2014, 08:00:48 PM
Last edit: February 12, 2014, 08:13:35 PM by etotheipi
 #3

Indeed, when you encrypt your wallet, Armory attempts to replace the unencrypted keys with the encrypted keys, in-place, hoping that the OS will overwrite the originals on disk.  Unfortunately, this is not guaranteed, and it's probably a PhD-level project to figure out how to guarantee overwrite/delete of such data.  But it's the best we can do when you start with an unencrypted wallet on disk, and any subsequent copies to other places/devices are guaranteed not to have the unencrypted data.  An attacker would need low-level access to your disk to look for sectors that were marked deleted but not actually overwritten (luckily, there's a chance that Armory's operations do work, but it's far from guaranteed).

I guess the best thing to do in this situation is to encrypt the HDD of your offline computer so that the initial restore will still be encrypted on disk (even though Armory is doing it unencrypted).  Or restore to a RAM disk, etc, that never touches the harddrive.  Then encrypt the wallet and copy the encrypted version to your harddrive.  Definitely not the most convenient but probably the best you can do without us fixing this...

Founder and CEO of Armory Technologies, Inc.
Armory Bitcoin Wallet: Bringing cold storage to the average user!
Only use Armory software signed by the Armory Offline Signing Key (0x98832223)

Please donate to the Armory project by clicking here!    (or donate directly via 1QBDLYTDFHHZAABYSKGKPWKLSXZWCCJQBX -- yes, it's a real address!)
bitpop
Legendary
*
Offline Offline

Activity: 2912
Merit: 1060



View Profile WWW
February 12, 2014, 08:05:45 PM
 #4

I use bitlocker on an offline computer. Or try a virtual machine that is truecrypted

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!