Bitcoin Forum
May 02, 2024, 03:01:30 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Mycelium Entropy update  (Read 8820 times)
Rassah (OP)
Moderator
Legendary
*
Offline Offline

Activity: 1680
Merit: 1035



View Profile WWW
October 29, 2014, 05:57:22 PM
 #1

Hi guys. Here is the update on the Entropy progress. The software is done, the hardware is finalized, the CE compliance is done (shown on the USB connectors in the image below), and the circuit boards are finished and ready for assembly. We were expecting them earlier, but because we changed the cases from plastic to metal, we ended up having to move chips around on the board to make sure they fit into the slimmer cases. As a result, the devices are much more durable, the metal case shielding makes them resistant to any EM interference, and it spares us from needing to go through extensive FCC and CE testing. (You can see the comparison of the old design to the new cases in the image links below).

Because we were not completely sure that the slightly redesigned boards would fit and align with the cases correctly, we had to only order a few sample cases so we could test them to see if they fit right. Since the circuit boards are at the assembly facility, we created an exact 3D printed replica of the board to test the fit (picture below). Now that we know that they fit ok, the cases are being ordered, and as soon as they get here, everything will get assembled, flashed, packaged, and shipped out. Sadly, and unexpectedly, the company making the metal cases has given us a 6 week estimate as their expected production and assembly time. So although we have everything else ready, we apparently miscalculated on the estimate for how long it would actually take to put the things together. In short, when we guessed way back in June how long this would take, we ended up guessing wrong, and we are extremely sorry about that. Yes, we are aware of the ridiculous trend of delays in this market, and we were really hoping that we wouldn't be another example (for a while we actually thought that maybe we could get them out even before October), but we are practically finished at this point, and just got surprised by the final step.

On the bright side, this does give us extra time to tighten up the software security even more. Actually, in a way, all our delays - from moving expected shipping to late October instead of earlier (after initial feedback led us to add many more entropy sources to protect against compromised hardware), to the metal cases slowing us down now (which we decided on after we received concerns about interference from nearby high voltage power lines) - have been due to the feedback and suggestions in security improvements from our community. In a way, this project became an open collaborative process, with a lot of discussion and feedback, and although it slowed things down a bit, it did increase the security of the devices considerably. We have increased the number of entropy sources, and added even more internal tests against outside interferences (such as fluctuations in temperatures, magnetic interference, timing, etc) to make sure the entropy sources are not compromised. We also added custom settings, such as switching between Bitcoin, Litecoin, and testnet, switching between compressed and uncompressed keys, and software key signatures for those who want to build their own firmware. With the delay, we will use this extra time to add even more customizable security settings, such as the ability for you to add your own random salt (such as Diceware) so you can generate verifiably random keys even without having to trust us and our hardware suppliers, as well as tools for users to obtain the raw random data which is generated by Mycelium Entropy every time it is plugged in, and to analyze it to verify that this seed random data contains more than enough entropy on the random seed to properly generate a unique private key, that the random seed data is unique, and there are no deterministic techniques used to generate it (that it is really an entropy-based white noise collected in the silicon of the Entropy device microcontroller).

When we are done with these things, they will probably be the most secure private key generators on the market (not counting your printer security...). To help with that, we are also now releasing the source code for the Entropy devices, which you can find here:

https://github.com/mycelium-com/entropy

Please feel free to review the code, and let us know if you have any concerns about anything, or if you want us to add something or even contribute your own code. For those looking to add altcoin support, now is your chance to figure out how as well.

* [Old device design](https://i.imgur.com/IVmisRt.jpg)
* [New device design](https://i.imgur.com/aLq7nbN.jpg)
* [New device in case](https://i.imgur.com/lKU8OM0.jpg)
* [3D printed circuit board to test fit](https://i.imgur.com/gwNqpso.jpg)
* [USB connectors w/ CE certification](https://i.imgur.com/UHlvZlN.jpg)
* [Engraved cases](https://i.imgur.com/6ySzZMz.jpg)
1714618890
Hero Member
*
Offline Offline

Posts: 1714618890

View Profile Personal Message (Offline)

Ignore
1714618890
Reply with quote  #2

1714618890
Report to moderator
1714618890
Hero Member
*
Offline Offline

Posts: 1714618890

View Profile Personal Message (Offline)

Ignore
1714618890
Reply with quote  #2

1714618890
Report to moderator
1714618890
Hero Member
*
Offline Offline

Posts: 1714618890

View Profile Personal Message (Offline)

Ignore
1714618890
Reply with quote  #2

1714618890
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714618890
Hero Member
*
Offline Offline

Posts: 1714618890

View Profile Personal Message (Offline)

Ignore
1714618890
Reply with quote  #2

1714618890
Report to moderator
1714618890
Hero Member
*
Offline Offline

Posts: 1714618890

View Profile Personal Message (Offline)

Ignore
1714618890
Reply with quote  #2

1714618890
Report to moderator
1714618890
Hero Member
*
Offline Offline

Posts: 1714618890

View Profile Personal Message (Offline)

Ignore
1714618890
Reply with quote  #2

1714618890
Report to moderator
Newar
Legendary
*
Offline Offline

Activity: 1358
Merit: 1000


https://gliph.me/hUF


View Profile
October 31, 2014, 07:13:37 AM
 #2


Looking good!

Nice to include Shamir's Secret Sharing! How do these print-outs look like?

OTC rating | GPG keyid 1DC91318EE785FDE | Gliph: lightning bicycle tree music | Mycelium, a swift & secure Bitcoin client for Android | LocalBitcoins
trasla
Hero Member
*****
Offline Offline

Activity: 707
Merit: 500



View Profile
October 31, 2014, 10:10:26 AM
 #3

Nice to include Shamir's Secret Sharing! How do these print-outs look like?

Somewhat like this:
https://i.imgur.com/CGHWIcS.jpg
LiteCoinGuy
Legendary
*
Offline Offline

Activity: 1148
Merit: 1010


In Satoshi I Trust


View Profile WWW
November 01, 2014, 08:35:02 AM
 #4

looks good. hopefully its cheaper than trezor  Cry

trasla
Hero Member
*****
Offline Offline

Activity: 707
Merit: 500



View Profile
November 02, 2014, 02:58:27 AM
 #5

looks good. hopefully its cheaper than trezor  Cry

The crowd funding buy links should still be open, 40 USD:
http://mycelium.com/entropy
bitkilo
Legendary
*
Offline Offline

Activity: 1638
Merit: 1010


https://www.bitcoin.com/


View Profile WWW
February 17, 2015, 04:20:42 AM
 #6

Could be a good time to give another update on ETA of this Entropy device.

trasla
Hero Member
*****
Offline Offline

Activity: 707
Merit: 500



View Profile
February 17, 2015, 07:54:14 AM
 #7

http://www.reddit.com/r/Bitcoin/comments/2w4991/mycelium_entropy_update_for_feb_16_2015/
bitkilo
Legendary
*
Offline Offline

Activity: 1638
Merit: 1010


https://www.bitcoin.com/


View Profile WWW
February 17, 2015, 08:34:55 AM
 #8

Just what i wanted, a million thank you's trasla.
I don't follow reddit much so thanks for bringing this to my attion and the btc forum.

trasla
Hero Member
*****
Offline Offline

Activity: 707
Merit: 500



View Profile
February 17, 2015, 08:40:29 AM
 #9

It was posted to the indiegogo campaign page as well, so if you contributed you should have gotten an email with this text, as far as I know. Smiley
bitkilo
Legendary
*
Offline Offline

Activity: 1638
Merit: 1010


https://www.bitcoin.com/


View Profile WWW
February 17, 2015, 08:49:48 AM
Last edit: February 17, 2015, 10:20:39 PM by bitkilo
 #10

It was posted to the indiegogo campaign page as well, so if you contributed you should have gotten an email with this text, as far as I know. Smiley
Nope no email received but this could be due to the fact that i purchase mine after the funding campaign ended, i think it was about the start of November i ordered, receipt is at work so i can check and update this post tomorrow.

Update: The invoice i have doesn't have an order date just 01/01/2015 but i know i didn't order it on new years day.

trasla
Hero Member
*****
Offline Offline

Activity: 707
Merit: 500



View Profile
February 17, 2015, 09:05:19 AM
 #11

It was posted to the indiegogo campaign page as well, so if you contributed you should have gotten an email with this text, as far as I know. Smiley
Nope no email received but this could be due to the fact that i purchase mine after the funding campaign ended, i think it was about the start of November i ordered, receipt is at work so i can check and update this post tomorrow.

If you did after the campaign ended, then only bitpay has your mail, indiegogo probably not, and you could not get an automated notification from them.
Anyway, I am here and post reddit links, so everything is fine Smiley
bitkilo
Legendary
*
Offline Offline

Activity: 1638
Merit: 1010


https://www.bitcoin.com/


View Profile WWW
March 02, 2015, 09:29:36 PM
 #12

New Update!
http://www.reddit.com/r/Bitcoin/comments/2xp6ss/mycelium_entropy_update_for_monday_march_2nd/
  Smiley Smiley  Shocked

hephaist0s
Hero Member
*****
Offline Offline

Activity: 711
Merit: 532



View Profile
March 24, 2015, 06:08:07 PM
 #13

Entropy device received! And it works great:



More pictures and words here. Thanks for the great work, guys!

Tips graciously accepted on my behalf by Mr. Pig. | object2212.com | BTC:1H78y8FVeQrWY6KnxA6WLFQGUoajCuiMAu | ETH:0x3c1bC39EC7F3f6b26ACb6eeeEFe7dE2f486a72E9
bitkilo
Legendary
*
Offline Offline

Activity: 1638
Merit: 1010


https://www.bitcoin.com/


View Profile WWW
March 24, 2015, 09:57:15 PM
 #14

Ahh, more people receiving there's, where is mine???

Looks great, cant wait for mine to arrive in the mail, I'm sure i will get it soon.
Thanks for the pic.

inBitweTrust
Hero Member
*****
Offline Offline

Activity: 658
Merit: 501



View Profile
April 06, 2015, 02:30:03 AM
 #15

I received mine.

https://mycelium.com/assets/entropy/me.html

yxt
Legendary
*
Offline Offline

Activity: 3528
Merit: 1116



View Profile
April 11, 2015, 07:48:27 AM
 #16

We still have a few in stock  Smiley

http://asicminer-shop.de/Mycelium-Entropy_1

BTCKano Pool██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
██
██
██
██
██ ██ ██
██ ██ ██
██ ██ ██
██ ██ ██
██ ██ ██
██ ██ ██
██ ██ ██
██ ██ ██
██ ██ ██
   ██
   ██
   ██
   ██
██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
██ ██
   ██
   ██
   ██
   ██
dsattler
Legendary
*
Offline Offline

Activity: 924
Merit: 1000


View Profile
April 11, 2015, 06:21:31 PM
 #17

I've written a small tool to verify the salt:



I could share it with the source (c#) if anyone is interested in this. You can run it on windows or linux (using mono).

Quote
Salt
This is an advanced feature for security experts.
If you do not trust your Mycelium Entropy device and believe it may be backdoored, then this feature, sometimes also referred to as Diceware, is for you. It lets you add your own entropy (salt) to the mix so that:

even though the salt is entered on your computer into settings.txt in a generally insecure way, its leakage does not compromise your key;

if the device’s RNG is rigged in an undetectable way, your key is still secure because of the salt;

the algorithm’s implementation is easily verified.

The current implementation is fairly simple and is called Type-1 salt. A more advanced algorithm has been proposed but has not been implemented yet.

Salt is a string of up to 32 bytes, which is entered in hexadecimal after the salt1 keyword in settings.txt.

Entropy is a 32-byte random number generated by Mycelium Entropy.

Key = SHA-256 ( Salt || Entropy ).

In the HD case, the first 128 bits of Key are used to construct the BIP-39 mnemonic.

Entropy is printed alongside the private/public key pair for your verification.
Source: https://mycelium.com/assets/entropy/me.html

Bitcointalk member since 2013! Smiley
bitkilo
Legendary
*
Offline Offline

Activity: 1638
Merit: 1010


https://www.bitcoin.com/


View Profile WWW
April 21, 2015, 09:39:11 AM
 #18

Still haven't seen mine yet, i ordered late from the indiegogo campaign site, about early Jan, any help on how i can track it down?
Has the last batch of 200 been released yet?

cisary
Member
**
Offline Offline

Activity: 79
Merit: 10


View Profile
April 21, 2015, 10:48:08 AM
 #19

I'm waiting for mine too.. Is there a way to modify the firmware so that I can use Entropy as HW random number generator? I want to print bunch of wallets and then I plan to experiment with code.. open source FTW!
bitkilo
Legendary
*
Offline Offline

Activity: 1638
Merit: 1010


https://www.bitcoin.com/


View Profile WWW
April 21, 2015, 10:53:50 AM
 #20

I'm waiting for mine too.. Is there a way to modify the firmware so that I can use Entropy as HW random number generator? I want to print bunch of wallets and then I plan to experiment with code.. open source FTW!
When did you order?

Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!