Offline device to generate wallets, keys and passwords. Incl. Air-gapped signing

[BitcoinDoe]

An offline device to minimize trust and generate Bitcoin wallets, encryption keys and passwords etc https://github.com/Offlinedevice/Offlinedevice.  All parts can be printed using a 3D-printer https://www.printables.com/model/1783754-raspberry-pi-with-rfid-camera-and-docking-station.

Air-gapped signing for files, messages and transactions. Offline signing of others public PGP keys.

Entropy can be generated by rolling of the dice.

Built using standard components found on the Internet and all software are open source.

Alt. use of NFC- hardware keys to login/decrypt device. Hardware can include a random salt to prevents brute force attack (if the attacker get hold of the encrypted backup or device and the device own encryption key.

[PX-Z]

Thanks for sharing. It looks like an excellent project if you're interested in how offline signing and cryptographic key management work.

As for storing a significant amount of Bitcoin, I'd still lean towards hardware wallets with a long security track record or wallets like electrum.

[satscraper]

An offline device to minimize trust and generate Bitcoin wallets, encryption keys and passwords etc https://github.com/Offlinedevice/Offlinedevice.  All parts can be printed using a 3D-printer https://www.printables.com/model/1783754-raspberry-pi-with-rfid-camera-and-docking-station.

Air-gapped signing for files, messages and transactions. Offline signing of others public PGP keys.

Entropy can be generated by rolling of the dice.

Built using standard components found on the Internet and all software are open source.

Alt. use of NFC- hardware keys to login/decrypt device. Hardware can include a random salt to prevents brute force attack (if the attacker get hold of the encrypted backup or device and the device own encryption key.

I saw that your repository offers the image for the Raspberry Pi 2 W. What is the sense  of having WiFi on board for offline device?

Can it be installed on  Raspberry Pi 2 Model B ^{no WiFi module}?

Regarding entropy.  Is dice rolling the only method to generate it, or can the signing device generate it on its own?

Is the wallet BIP 39 compliant?

[bitmover]

Regarding entropy.  Is dice rolling the only method to generate it, or can the signing device generate it on its own?

Is the wallet BIP 39 compliant?

Looks like you can use a hardware wallet to generate the seed words

A wallet can be generated by a trusted hardware wallet such as Blockstream Jade and then inported to get air-gapped functionality while the keys are encrypted on the Offline device. Or, you can create your own key (seed words) with randomness from dice throws etc.
https://github.com/Offlinedevice/Offlinedevice#add-and-create-bitcoin-wallets

It is a nice initiative, but I agree with PX-Z. So many good and secure options around with a long security track...

[dkbit98]

First time I hear about this project, but it looks interesting.
I am all for bitcoin airgapped signers, and we already have good selection of DIY devices.
Seedsigner is probably one of the best options, and it can even be combined with Satochip cards.

Entropy can be generated by rolling of the dice.

I would be careful with dices.
There are people in the past who generated weak entropy by not using dices correctly.

[Forsyth Jones]

There are many things and possibilities to do with this tool/code. I recommend you guys check the list (it's impossible to mention them all without making the text too long). I'll bookmark it and analyze it more calmly.

Besides being an airgapped wallet, we can create gpg keys, use digital IDs... I don't know the use case, can someone give me some examples?

It would be interesting if someone made a video (like Crypto Guide) and explained most of the features. It's really quite a stuff.

I'm most interested in this feature:
-Option for strong password generation (also with user entropy)

Does it work as a password manager? Does it use passwords generated by BIP-85 passwords (if not already, it would be a wonderful addition)?

I would be careful with dices.
There are people in the past who generated weak entropy by not using dices correctly.

Yeah, rolling data on your own, even if you have an advanced airgapped signature device, can be dangerous if the user has no idea how to use it or thinks they are doing it correctly, it can end up in cases like this: 0.40 Bitcoin taken instantly from my coldcard..

[BitcoinDoe]

Now there is support for Bitcoin Multisig wallets and Multisig signing keys.

Signing keys:
- Create multisig signing keys from your own entropy (randomness).
- Import Bitcoin signing keys from other persons or sources.
- Exchange signing keys through (offline) encrypted messsaging.
- Each signing key can have its own PGP (detached) signature (it can be a third party).
- Each signing key have photo, description and transaction record.

Multisig wallets:
- Create wallets using signing keys and define the descriptors (”2 out of 3” etc).
- Export wallet Xpubs to a preferred companion app (Nunchuck etc) using QR-codes or files.
- Sign transactions with your own key or a third party device. Using air-gapped QR-codes or files.
- Request signatures from other signing key holders using encryption and signed messaging.
- Import encrypted and signed transactions from others and display them as QR-code or export to file.

https://github.com/Offlinedevice/Offlinedevice#add-and-create-bitcoin-wallets-and-multisig-wallets
 

[Cricktor]

I saw that your repository offers the image for the Raspberry Pi 2 W. What is the sense  of having WiFi on board for offline device?

I'm OK with the option for an image for those devices, because you can turn off the wireless interfaces at the firmware level by adding two device tree overlay lines to the boot configuration file config.txt (e.g. source: https://help.pisignage.com/hc/en-us/articles/52406458481817-Disabling-Wi-Fi-and-Bluetooth-on-Raspberry-Pi).

Code:

dtoverlay=disable-wifi
dtoverlay=disable-bt

Of course, physically not present wireless interfaces are more secure, but I've tested above configuration and the OS on the Raspi 2W doesn't see any wireless interfaces anymore and I couldn't see such a device ever on my local network or via Bluetooth (tested with different devices and a Flipper Zero).

When I buy such Raspies I usually opt for the better equipped versions because I can turn off what I don't need but can't enable what I don't have if the device lacks certain required features for some project.


I would love to see an option to combine (XOR) the Raspi's hardware TRNG with dice rolls. That should mitigate any screw-ups of the user's dice rolls to still yield a safe, secure and random entropy base for wallet generation.

I'm not paranoid enough to consider the Raspi's hardware TRNG as potentially rigged when random numbers generated by it don't fail tests for quality randomness.

I would also love to see the option for verbose details to see everything for verifiability, in above option that means to see what has been used as random entropy from the hardware TRNG and what user provided entropy from dice rolls was used. If you want to check and verify everything manually, you should've the option for it!