1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
|
Received: from sog-mx-3.v43.ch3.sourceforge.com ([172.29.43.193]
helo=mx.sourceforge.net)
by sfs-ml-4.v29.ch3.sourceforge.com with esmtp (Exim 4.76)
(envelope-from <gronager@ceptacle.com>) id 1UWrXt-000320-Fu
for bitcoin-development@lists.sourceforge.net;
Mon, 29 Apr 2013 17:07:21 +0000
X-ACL-Warn:
Received: from 2508ds5-oebr.1.fullrate.dk ([90.184.5.129]
helo=mail.ceptacle.com)
by sog-mx-3.v43.ch3.sourceforge.com with esmtp (Exim 4.76)
id 1UWrXq-0006ua-Ib for bitcoin-development@lists.sourceforge.net;
Mon, 29 Apr 2013 17:07:21 +0000
Received: from localhost (localhost [127.0.0.1])
by mail.ceptacle.com (Postfix) with ESMTP id 57D662DEF1A6;
Mon, 29 Apr 2013 18:51:04 +0200 (CEST)
X-Virus-Scanned: amavisd-new at ceptacle.com
Received: from mail.ceptacle.com ([127.0.0.1])
by localhost (server.ceptacle.private [127.0.0.1]) (amavisd-new,
port 10024)
with ESMTP id 2L8H25O6M8sk; Mon, 29 Apr 2013 18:51:03 +0200 (CEST)
Received: from [10.0.1.75] (2508ds5-oebr.1.fullrate.dk [90.184.5.129])
by mail.ceptacle.com (Postfix) with ESMTPSA id B9EED2DEF18F;
Mon, 29 Apr 2013 18:51:02 +0200 (CEST)
References: <517E8417.50400@privacyfoundation.de>
<20130429162839.GA31932@petertodd.org>
Mime-Version: 1.0 (1.0)
In-Reply-To: <20130429162839.GA31932@petertodd.org>
Content-Type: multipart/alternative;
boundary=Apple-Mail-86A12B19-8627-47B4-9F01-D2F4D58A2A7D
Content-Transfer-Encoding: 7bit
Message-Id: <5B4F4F35-5FB3-45F9-B7E1-500D01CFA569@ceptacle.com>
X-Mailer: iPhone Mail (10B329)
From: Michael Gronager <gronager@ceptacle.com>
Date: Mon, 29 Apr 2013 18:50:59 +0200
To: Peter Todd <pete@petertodd.org>
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam Filtering performed by mx.sourceforge.net.
See http://spamassassin.org/tag/ for more details.
1.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
X-Headers-End: 1UWrXq-0006ua-Ib
Cc: "dev@lists.crypto-stick.org" <dev@lists.crypto-stick.org>,
"bitcoin-development@lists.sourceforge.net"
<bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Hardware BitCoin wallet as part of Google
Summer of Code
X-BeenThere: bitcoin-development@lists.sourceforge.net
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <bitcoin-development.lists.sourceforge.net>
List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
<mailto:bitcoin-development-request@lists.sourceforge.net?subject=unsubscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum_name=bitcoin-development>
List-Post: <mailto:bitcoin-development@lists.sourceforge.net>
List-Help: <mailto:bitcoin-development-request@lists.sourceforge.net?subject=help>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
<mailto:bitcoin-development-request@lists.sourceforge.net?subject=subscribe>
X-List-Received-Date: Mon, 29 Apr 2013 17:07:21 -0000
--Apple-Mail-86A12B19-8627-47B4-9F01-D2F4D58A2A7D
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Are you familiar with this:
http://code.google.com/p/opencryptotoken/
It does ecc and as it is based on an atmel micro controller, adding a displa=
y is pretty straight forward =20
Michael=20
On 29/04/2013, at 18.28, Peter Todd <pete@petertodd.org> wrote:
> On Mon, Apr 29, 2013 at 10:30:47PM +0800, Crypto Stick wrote:
>> Crypto Stick is an open source USB key for encryption and secure
>> authentication.
>> We have been accepted as a mentor organization for Google
>> Summer of Code (GSOC) 2013. One of our project ideas is to develop a
>> physical BitCoin wallet according to
>> https://en.bitcoin.it/wiki/Smart_card_wallet
>=20
> A word of caution: hardware Bitcoin wallets really do need some type of
> display so the wallet itself can tell you where the coins it is signing
> are being sent, and that in turn implies support for the upcoming
> payment protocol so the wallet can also verify that the address is
> actually the address of the recipient the user is intending to send
> funds too. The current Crypto Stick hardware doesn't even have a button
> for user interaction. (press n times to approve an n-BTC spend)
>=20
> Having said that PGP smart cards and USB keys already have that problem,
> but the consequences of signing the wrong document are usually less than
> the consequences of sending some or even all of the users funds to a
> thief. You can usually revoke a bad signature after the fact with a
> follow-up message.
>=20
> Not to say hardware security for private keys isn't a bad thing, but the
> protections are a lot more limited than users typically realize.
>=20
>=20
> I will say though I am excited that this implies that the Crypto Stick
> could have ECC key support in the future.
>=20
> --=20
> 'peter'[:-1]@petertodd.org
> --------------------------------------------------------------------------=
----
> Try New Relic Now & We'll Send You this Cool Shirt
> New Relic is the only SaaS-based application performance monitoring servic=
e=20
> that delivers powerful full stack analytics. Optimize and monitor your
> browser, app, & servers with just a few lines of code. Try New Relic
> and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr=
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
--Apple-Mail-86A12B19-8627-47B4-9F01-D2F4D58A2A7D
Content-Type: text/html;
charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div style=3D"-webkit-text-size-adjust: aut=
o; ">Are you familiar with this:</div><div style=3D"-webkit-text-size-adjust=
: auto; "><br></div><div style=3D"-webkit-text-size-adjust: auto; "><span st=
yle=3D"font-family: '.HelveticaNeueUI'; font-size: 15px; line-height: 19px; w=
hite-space: nowrap; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875);=
-webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-comp=
osition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust:=
none; "><a href=3D"http://code.google.com/p/opencryptotoken/">http://code.g=
oogle.com/p/opencryptotoken/</a></span></div><div style=3D"-webkit-text-size=
-adjust: auto; "><span style=3D"font-family: '.HelveticaNeueUI'; font-size: 1=
5px; line-height: 19px; white-space: nowrap; -webkit-tap-highlight-color: rg=
ba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227=
, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -=
webkit-text-size-adjust: none; "><br></span></div><div style=3D"-webkit-text=
-size-adjust: auto; "><span style=3D"font-family: '.HelveticaNeueUI'; font-s=
ize: 15px; line-height: 19px; white-space: nowrap; -webkit-tap-highlight-col=
or: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 19=
2, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230=
469); -webkit-text-size-adjust: none; ">It does ecc and as it is based on an=
atmel micro controller, adding a display is pretty straight forward <=
/span></div><div style=3D"-webkit-text-size-adjust: auto; "><span style=3D"f=
ont-family: '.HelveticaNeueUI'; font-size: 15px; line-height: 19px; white-sp=
ace: nowrap; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webki=
t-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition=
-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: none; "=
><br></span></div><div><font face=3D".HelveticaNeueUI"><span style=3D"font-s=
ize: 15px; line-height: 19px; white-space: nowrap; -webkit-tap-highlight-col=
or: rgba(26, 26, 26, 0.292969); -webkit-composition-fill-color: rgba(175, 19=
2, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230=
469);">Michael </span></font></div><div style=3D"-webkit-text-size-adju=
st: auto; "><br>On 29/04/2013, at 18.28, Peter Todd <<a href=3D"mailto:pe=
te@petertodd.org">pete@petertodd.org</a>> wrote:<br><br></div><blockquote=
type=3D"cite" style=3D"-webkit-text-size-adjust: auto; "><div><span>On Mon,=
Apr 29, 2013 at 10:30:47PM +0800, Crypto Stick wrote:</span><br><blockquote=
type=3D"cite"><span>Crypto Stick is an open source USB key for encryption a=
nd secure</span><br></blockquote><blockquote type=3D"cite"><span>authenticat=
ion.</span><br></blockquote><blockquote type=3D"cite"><span>We have been acc=
epted as a mentor organization for Google</span><br></blockquote><blockquote=
type=3D"cite"><span>Summer of Code (GSOC) 2013. One of our project ideas is=
to develop a</span><br></blockquote><blockquote type=3D"cite"><span>physica=
l BitCoin wallet according to</span><br></blockquote><blockquote type=3D"cit=
e"><span><a href=3D"https://en.bitcoin.it/wiki/Smart_card_wallet">https://en=
.bitcoin.it/wiki/Smart_card_wallet</a></span><br></blockquote><span></span><=
br><span>A word of caution: hardware Bitcoin wallets really do need some typ=
e of</span><br><span>display so the wallet itself can tell you where the coi=
ns it is signing</span><br><span>are being sent, and that in turn implies su=
pport for the upcoming</span><br><span>payment protocol so the wallet can al=
so verify that the address is</span><br><span>actually the address of the re=
cipient the user is intending to send</span><br><span>funds too. The current=
Crypto Stick hardware doesn't even have a button</span><br><span>for user i=
nteraction. (press n times to approve an n-BTC spend)</span><br><span></span=
><br><span>Having said that PGP smart cards and USB keys already have that p=
roblem,</span><br><span>but the consequences of signing the wrong document a=
re usually less than</span><br><span>the consequences of sending some or eve=
n all of the users funds to a</span><br><span>thief. You can usually revoke a=
bad signature after the fact with a</span><br><span>follow-up message.</spa=
n><br><span></span><br><span>Not to say hardware security for private keys i=
sn't a bad thing, but the</span><br><span>protections are a lot more limited=
than users typically realize.</span><br><span></span><br><span></span><br><=
span>I will say though I am excited that this implies that the Crypto Stick<=
/span><br><span>could have ECC key support in the future.</span><br><span></=
span><br><span>-- </span><br><span>'peter'[:-1]@<a href=3D"http://petertodd.=
org">petertodd.org</a></span><br></div></blockquote><blockquote type=3D"cite=
" style=3D"-webkit-text-size-adjust: auto; "><div><span>--------------------=
----------------------------------------------------------</span><br><span>T=
ry New Relic Now & We'll Send You this Cool Shirt</span><br><span>New Re=
lic is the only SaaS-based application performance monitoring service </span=
><br><span>that delivers powerful full stack analytics. Optimize and monitor=
your</span><br><span>browser, app, & servers with just a few lines of c=
ode. Try New Relic</span><br><span>and get this awesome Nerd Life shirt! <a h=
ref=3D"http://p.sf.net/sfu/newrelic_d2d_apr">http://p.sf.net/sfu/newrelic_d2=
d_apr</a></span></div></blockquote><blockquote type=3D"cite" style=3D"-webki=
t-text-size-adjust: auto; "><div><span>_____________________________________=
__________</span><br><span>Bitcoin-development mailing list</span><br><span>=
<a href=3D"mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-develop=
ment@lists.sourceforge.net</a></span><br><span><a href=3D"https://lists.sour=
ceforge.net/lists/listinfo/bitcoin-development">https://lists.sourceforge.ne=
t/lists/listinfo/bitcoin-development</a></span><br></div></blockquote></body=
></html>=
--Apple-Mail-86A12B19-8627-47B4-9F01-D2F4D58A2A7D--
|
