3 ms·

So, the attacker must inject a malicious ECDSA signing code to the victims bitcoin client? If I get this right, it doesn't sound like sensible research to me a

• Guvante 12y ago
  Cold bitcoin wallets are supposed to be malware proof. If you have a piece of logic on a machine that never connects to the internet you have no way of stealing the private keys. Similarly you can't just modify the message because the user can verify the destination address before committing it. This is a method of sending out the private key within a normal looking message that no one else can detect (not even the person doing the offline transition).
• runeks 12y ago
  > If I get this right, it doesn't sound like sensible research to me at all. If you are able to get code to the victims computer, then you can just steal the private keys right away. The private keys are not on the computer, but on a piece of hardware (like the Trezor). The researchers claim that they can get the private key from the Trezor, by feeding it malicious, unsigned transactions. At least that's how I understand it.