4 ms·
Don't most wallets use deterministic RFC-6979 signatures? (Unfortunately verifying if that algorithm was used requires the private key) https://datatracker.iet
by CodesInChaos 4y ago
Don't most wallets use deterministic RFC-6979 signatures? (Unfortunately verifying if that algorithm was used requires the private key)
https://datatracker.ietf.org/doc/html/rfc6979 https://datatracker.ietf.org/doc/html/rfc6979
- JonathanBeuys 4y agoGreat point! That means when you sign a transaction with multiple RFC-6979 compliant wallets, they should return the exact same signature. So it is possible to tackle the "phone home via the signature" problem. Wow, just wow! Two threads, 144 comments and we have a complete turn of the situation again!
- JonathanBeuys 4y agoSo for the record: To sign a transaction without trusting the hardware wallet to not leak your seed phrase or other private data, you have to sign the transaction on multiple RFC-6979 compliant hardware wallets and make sure they return the exact same signature.