11

It's clearly safe to create a savings wallet offline with a live CD, as no data can be sent to an attacker even if the live CD image is compromised (which seems unlikely).

However, when it comes to sending a transaction from a savings wallet, the client must be connected to the internet, so the risk increases. If you create a live linux CD, with an OS such as Ubuntu, it is out of date within a fairly short time of it being created as the live CD does not receive the latest patches that a permanent installation normally receives.

Presumably this means there's a chance (however small) that when you use the live CD and connect to the internet a security hole will exist that can be exploited to steal your wallet and wallet passphrase next time you enter it. How big is this risk? (Am I just being totally paranoid?!)

The severity of the risk is obviously a difficult thing to determine in the context of all possible live CDs, so perhaps a better question is this, if the first one is too difficult: have there previously been any security holes in live CD releases that allow an attacker to remotely control the computer?

Improve this question
2
  • 2
    I think this question belongs to other SEs, like StackOverflow, SuperUser, Ask Ubuntu, or IT Security, as it is not a Bitcoin-specific problem.
    – ThePiachu
    Dec 21 '11 at 8:19
  • 1
    In my opinion, there is sufficient concern about private key safety within the Bitcoin community that it justifies a Bitcoin-specific answer here.
    – Gary Rowe
    Dec 21 '11 at 9:42
4

Security is always an issue and complex systems like operating systems are prone to attacks. However, it is possible to use an offline machine to create the signed transactions and then export them to another machine.

For example a soft copy of those signed transactions could be copied on to a fresh USB stick, or printed out on paper as plain text or QR codes and so on. These transactions could then be imported into an online Bitcoin client that does not have the private keys, but can just transmit the transactions to the network.

Your private keys are always held offline and thus only exposed to physical attack vectors which should be sufficient to relieve your concerns.

Improve this answer
3
  • 1
    Is there any guides or tools on how to create the signed transaction then import it into another client?
    – Sean Chapman
    Dec 21 '11 at 9:48
  • 2
    Take a look at the forums here: bitcointalk.org/index.php?topic=28278.0
    – Gary Rowe
    Dec 21 '11 at 9:55
  • 1
    I would not recommend connecting a printer to the air-gapped computer (especially USB printer). If you want to transfer data to/from the air-gapped computer you can use RFC1751 encoding/decoding. If you want to print data - use a pencil. I was thinking about this and this is why I added RFC1751 encoding/decoding tool in my live CD: github.com/vstoykovbg/cryptopup Maybe haveged is a good solution for the PRNG problem, but I recommend mixing the noise from the microphone or noise generator just in case: github.com/vstoykovbg/doublerandom
    – Valentin Stoykov
    Oct 31 '20 at 22:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.