Pavol Rusnak [ARCHIVE] on Nostr: 📅 Original date posted:2013-11-16 📝 Original message:On 03/11/13 08:40, Timo ...
📅 Original date posted:2013-11-16
📝 Original message:On 03/11/13 08:40, Timo Hanke wrote:
> Trezor picks random s and sends S=s*G to computer, keeping s secret.
That's a really neat trick!
> One question remains: if you only write down the mnemonic how can you be
> sure that it is correct and corresponds to the secret in Trezor?
Right. That's a problem. I'm not sure if this whole cryptomagic is
benefitial at all.
I'd suggest to go the easy way for now, i.e. prove that external entropy
was used while generating the master seed. If the user does not trust
our firmware, he can use his own built one.
--
Best Regards / S pozdravom,
Pavol Rusnak <stick at gk2.sk>
📝 Original message:On 03/11/13 08:40, Timo Hanke wrote:
> Trezor picks random s and sends S=s*G to computer, keeping s secret.
That's a really neat trick!
> One question remains: if you only write down the mnemonic how can you be
> sure that it is correct and corresponds to the secret in Trezor?
Right. That's a problem. I'm not sure if this whole cryptomagic is
benefitial at all.
I'd suggest to go the easy way for now, i.e. prove that external entropy
was used while generating the master seed. If the user does not trust
our firmware, he can use his own built one.
--
Best Regards / S pozdravom,
Pavol Rusnak <stick at gk2.sk>