Timeline for Are there any hardware privkey/pubkey generators out there?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 12, 2014 at 6:37 | vote | accept | darren | ||
| Dec 12, 2014 at 4:22 | comment | added | David A. Harding | Trezor's main purpose is secure signing, and it mostly derives key pairs from a seed rather than generating them from a random number. I have reasonable trust in the public faces of Trezor, but I don't know anything about the people who designed the hardware, manufactured the hardware, or delivered the hardware---and any one of them could've changed the specs in a way that's very hard to detect. | |
| Dec 12, 2014 at 4:21 | comment | added | darren | The offline signing-only wallet sounds useful, thanks for the pointer. We're still putting our trust in someone by selecting the "secure wallet" to use but I can see the logic. | |
| Dec 12, 2014 at 4:14 | comment | added | darren | thanks, I see your point. That said Trezor is hardware desgined specifically to generate key pairs with a little more added on, is it not? The brand has much to lose if it's found out that something untoward has happened but that could be nothing compared to the gains. I have a Trezor and there's no reason to believe the company is anything but honest but I don't see a that big of a distinction between the two cases. | |
| Dec 12, 2014 at 3:46 | history | answered | David A. Harding | CC BY-SA 3.0 |