Skip to main content
Bitcoin

Return to Question

edited title
Source Link
B T
B T
  • 1.7k
  • 16
  • 28

Is it possible to design a hardware wallet that can allow operation of a routing Lightning node without riskwith the security level of thefta hardware wallet?

I'm wondering if its possible to design a hardware wallet such that it can be used for a Lightning node that routes payments for their channel partners such that their funds can never be stolen even if their main machine has been kernel hacked.

I'm thinking that this is how it might work:

  1. The hardware wallet would receive a signed transaction originating from its source channel-partner AND an unsigned transaction (to sign) sending to its destination channel-partner.
  2. The hardware wallet verifies that the sum of the amounts of both transactions sum to greater than 0 (ie verifying that the node isn't losing funds by signing this transaction), verifies that the inputs are valid (using SPV), verifies that both transactions requires the same hash-secret to unlock, and verifies that its only sending to a multi-sig address that requires its private key to unlock
  3. The hardware wallet then signs the unsigned requested transaction and gives it back to the Lightning Client to send

It seems like if a hardware wallet did this kind of verification, it would be safe to have a routing Lightning node that interacted with an always-connected hardware wallet without any riskwith the level of lost fundssecurity that a normal hardware wallet has. Is something along these lines possible?

Is it possible to design a hardware wallet that can allow operation of a Lightning node without risk of theft?

I'm wondering if its possible to design a hardware wallet such that it can be used for a Lightning node that routes payments for their channel partners such that their funds can never be stolen even if their main machine has been kernel hacked.

I'm thinking that this is how it might work:

  1. The hardware wallet would receive a signed transaction originating from its source channel-partner AND an unsigned transaction (to sign) sending to its destination channel-partner.
  2. The hardware wallet verifies that the sum of the amounts of both transactions sum to greater than 0 (ie verifying that the node isn't losing funds by signing this transaction), verifies that the inputs are valid (using SPV), verifies that both transactions requires the same hash-secret to unlock, and verifies that its only sending to a multi-sig address that requires its private key to unlock
  3. The hardware wallet then signs the unsigned requested transaction and gives it back to the Lightning Client to send

It seems like if a hardware wallet did this kind of verification, it would be safe to have a routing Lightning node that interacted with an always-connected hardware wallet without any risk of lost funds. Is something along these lines possible?

Is it possible to design a hardware wallet that can allow operation of a routing Lightning node with the security level of a hardware wallet?

I'm wondering if its possible to design a hardware wallet such that it can be used for a Lightning node that routes payments for their channel partners such that their funds can never be stolen even if their main machine has been kernel hacked.

I'm thinking that this is how it might work:

  1. The hardware wallet would receive a signed transaction originating from its source channel-partner AND an unsigned transaction (to sign) sending to its destination channel-partner.
  2. The hardware wallet verifies that the sum of the amounts of both transactions sum to greater than 0 (ie verifying that the node isn't losing funds by signing this transaction), verifies that the inputs are valid (using SPV), verifies that both transactions requires the same hash-secret to unlock, and verifies that its only sending to a multi-sig address that requires its private key to unlock
  3. The hardware wallet then signs the unsigned requested transaction and gives it back to the Lightning Client to send

It seems like if a hardware wallet did this kind of verification, it would be safe to have a routing Lightning node that interacted with an always-connected hardware wallet with the level of security that a normal hardware wallet has. Is something along these lines possible?

Source Link
B T
B T
  • 1.7k
  • 16
  • 28

Is it possible to design a hardware wallet that can allow operation of a Lightning node without risk of theft?

I'm wondering if its possible to design a hardware wallet such that it can be used for a Lightning node that routes payments for their channel partners such that their funds can never be stolen even if their main machine has been kernel hacked.

I'm thinking that this is how it might work:

  1. The hardware wallet would receive a signed transaction originating from its source channel-partner AND an unsigned transaction (to sign) sending to its destination channel-partner.
  2. The hardware wallet verifies that the sum of the amounts of both transactions sum to greater than 0 (ie verifying that the node isn't losing funds by signing this transaction), verifies that the inputs are valid (using SPV), verifies that both transactions requires the same hash-secret to unlock, and verifies that its only sending to a multi-sig address that requires its private key to unlock
  3. The hardware wallet then signs the unsigned requested transaction and gives it back to the Lightning Client to send

It seems like if a hardware wallet did this kind of verification, it would be safe to have a routing Lightning node that interacted with an always-connected hardware wallet without any risk of lost funds. Is something along these lines possible?