Subnostr

So the seed is stored, encrypted and pin protected on their servers? Need to read about it. Sounds weird.

No, the seed is encrypted with PIN (Local) + secret (Blockstream Server).

The seed is stored locally on the Jade.

What does this do? If you extract the seed from the chip and try to brute force attack it, it will be useless, because apart from the pin, you need the secret (256 bits) stored in the blockstream server.

So they would have to hack also the Blockstream server and have your jade and also know the pin.

On the other hand the blockstream server can not do anything, it is only a shared secret, the blockstream server at no time access to the Jade.

https://help.blockstream.com/hc/en-us/articles/9639949755673-How-does-Blockstream-Jade-s-oracle-enforced-PIN-protection-work

Reply to this note

Please Login to reply.

Discussion

GLACA 1y ago

So this needs internet connection to Blockstream servers and they need to work. If they go down? What happens? How do you unlock the secret? Passphrase?

Cyph3rp9nk 1y ago

Correct, in case blockstream stops giving service you would only have to restore the seed in another wallet or operate in the other mode that Jade has which is air-gapped (like seedsigner).

There is no risk of loss of funds.

On the other hand you can set up your own server:

https://help.blockstream.com/hc/en-us/articles/12800132096793-Set-up-a-personal-blind-oracle

You also have it on Umbrel:

https://apps.umbrel.com/app/blockstream-blind-oracle

GLACA 1y ago

Pretty cool system.