Nostr Web Client

The only wallets that meet this requirement are those that do not have any secure element.

It is unfortunate that influencers who are not cryptographers, or even computer scientists, are recommending and analyzing hardware wallets.

A Trezor T (despite its vulnerability) with a passphrase of more than 128 bits of entropy is more secure than any hardware wallet with a secure element and a PIN.

Whichever HWW you use, you have to realize that you must use a seed + passphrase with more than 128 bits of entropy, and therefore a secure element becomes unnecessary as well as inadequate because they sell it to you as if a passphrase is not necessary, and on top of that you have to trust something that is a black box, such as the secure element.

It's incredible how much nonsense I have to listen to in this Bitcoin space.

nostr:nevent1qqs25668ywg6prc7c4n39e5ndt83g7geneqyvsxva8pmc0mhcud4l2q09ljnw

Reply to this note

Please Login to reply.

Discussion

Cyph3rp9nk 8h ago 💬 12

Why use a passphrase with more than 128 bits of entropy?

- To forget about the stupid market for hardware wallets with secure elements.

- So you don't have to worry if your seed is stolen.

"Politicians are thieves and bastards" has an entropy of 205.

nostr:nevent1qqs0zysnu92r60vnnkuptcwekara23wdjxdux3x3agfdahuy2vfdtpqpp4mhxue69uhkummn9ekx7mq8s7kms

Davi Pinheiro 8h ago

Quem menos sabe é quem mais compra. Conhecimento é nosso maior patrimônio.

Arándano 8h ago

I fully agree on this and I would also like to add the attack vector of being registered as a purchaser in a vendor database, which can be even worst if you define your home address as delivery address.

With a #seedsigner or #krux DIY hardware signer, buying the hardware elements from different vendors is completely impossible to really link your UTXO's with any hardware wallet/signer.

Theae last (HW vendors) have created a unnecessary need for the only own interest: their fucking business!

observer👁️🌐 4h ago

What is your position on the #Trezor Safe 7 which uses an open source secure element?

Cyph3rp9nk 3h ago

It uses one open secure element (tropic) and one closed secure element.

So I don't share this new philosophy. There is still an element of trust, and your seed will be vulnerable to a weak PIN or a bug or backdoor in the secure element, so in the end you're going to have to use the passphrase, which brings us back to square one: a seed with a strong passphrase (+128 bits) does not need a secure element.