4 ms·
Very interesting! The “attacker” wouldn’t know which signatures came from their hardware, but I suppose they could easily scan all transactions to find them. T
by philomath_mn 4y ago
Very interesting! The “attacker” wouldn’t know which signatures came from their hardware, but I suppose they could easily scan all transactions to find them.
The only fix I can think of would be to evaluate the hardware signatures using statistical tests to try to pick up any bias. This would be a burden on the user, but at least feasible.
- JonathanBeuys 4y agoYes, the attacker would watch every transaction on the blockchain for their bits. Not hard to do, since there are just a few transactions per second. Interesting idea with the bias checking. Not sure if it is possible. If it is, it would probably need very clever software to do that. One that bombards the hardware wallet with a big number of seeds and transactions and checks if it can find indications of the seeds having an impact on the signatures.
- lacker 4y agoThe malicious wallet could encrypt the data it's reporting before splitting it into bits to report it. Then there won't be any pattern to show up on statistical tests.