public inbox for bitcoindev@googlegroups.com
 help / color / mirror / Atom feed
From: Owen Kemeys <owenjk@gmail•com>
To: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Subject: Re: [bitcoindev] CTV + CSFS: a letter
Date: Sun, 15 Jun 2025 12:43:50 -0700 (PDT)	[thread overview]
Message-ID: <e65b99a8-5234-451d-b62e-9484c2d59c76n@googlegroups.com> (raw)
In-Reply-To: <CADL_X_cc2UdbFkFjL7ma9q=3mdgWs-s7+31UH62bdacmOLXK3A@mail.gmail.com>


[-- Attachment #1.1: Type: text/plain, Size: 1802 bytes --]

On Sunday, 15 June 2025 at 10:10:59 UTC-6 Jameson Lopp wrote:

It's the same problem as securely generating and storing keys. In order for 
presigned transaction vaults to actually be trustworthy then ephemeral key 
usage needs to occur on a hardened offline device that is highly unlikely 
to be compromised. I'm not aware of any of the hardware manufacturers 
offering functionality for generating and signing with ephemeral keys.


I'm talking my employer's book, but you can approximate this function for 
sure on Foundation Passport by generating a child seed then loading it as a 
temporary signing key (forgotten on power off). I'm sure Coldcard offers 
something similar and perhaps others. Of course, you'd have to remember to 
delete the seed before putting the device away, and it's derived, not 
generated from scratch, so undermining some of the security. But it's 
close, and the desired functionality could be added if there was demand, 
all the pieces are there.

The upcoming Passport Prime device would be perfectly placed to serve a 
workflow in a secure environment that generates an ephemeral key, signs, 
discards, and passes the PSBTs back to the online device. This is niche 
enough that we're unlikely to write the applet ourselves, but that's why 
it's an open source platform - hopefully some vault project will come along 
and assemble the building blocks in the right way; it shouldn't be hard.

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups•com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/e65b99a8-5234-451d-b62e-9484c2d59c76n%40googlegroups.com.

[-- Attachment #1.2: Type: text/html, Size: 2369 bytes --]

  parent reply	other threads:[~2025-06-15 19:56 UTC|newest]

Thread overview: 61+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-06-09 11:40 James O'Beirne
2025-06-09 12:51 ` Michael Folkson
2025-06-09 14:41   ` James O'Beirne
2025-06-09 15:56     ` Michael Folkson
2025-06-09 13:51 ` Matt Corallo
2025-06-09 14:43   ` James O'Beirne
2025-06-09 17:51     ` Matt Corallo
2025-06-09 19:27       ` /dev /fd0
2025-06-09 21:12         ` Matt Corallo
2025-06-09 18:55 ` 'Antoine Poinsot' via Bitcoin Development Mailing List
2025-06-10  2:02   ` Paul Sztorc
2025-06-09 23:02 ` Andrew Poelstra
2025-06-10  2:08   ` David A. Harding
2025-06-10 13:23     ` Andrew Poelstra
2025-06-10 17:17       ` Matt Corallo
2025-06-10 23:42         ` Antoine Riard
2025-06-12  3:34           ` James O'Beirne
2025-06-13  1:18             ` Antoine Riard
2025-06-10 23:42         ` Antoine Riard
2025-06-11 13:52         ` Peter Todd
2025-06-13  6:19       ` Anthony Towns
2025-06-13 14:50         ` Harsha Goli
2025-06-10 14:03     ` James O'Beirne
2025-06-10 16:56       ` Sjors Provoost
2025-06-10 17:15         ` 'Antoine Poinsot' via Bitcoin Development Mailing List
2025-06-10 19:04         ` Paul Sztorc
2025-06-11 18:09         ` Brandon Black
2025-06-10  2:28   ` Melvin Carvalho
2025-06-10 13:19     ` Greg Sanders
2025-06-11 14:12       ` James O'Beirne
     [not found]         ` <CAB3F3Dsf8=rbOyPf1yTQDzyQQX6FAoJWTg16VC8PVs4_uBkeTw@mail.gmail.com>
2025-06-11 16:50           ` James O'Beirne
2025-06-11 18:34             ` James O'Beirne
2025-06-11 20:30             ` Matt Corallo
2025-06-12  0:59               ` Harsha Goli
2025-06-12 18:04                 ` Matt Corallo
2025-06-12 18:38                   ` James O'Beirne
2025-06-12 18:43                     ` Matt Corallo
2025-06-12 19:51                     ` Andrew Poelstra
2025-06-12 22:44                       ` Matt Corallo
2025-06-13 11:08                         ` Jameson Lopp
2025-06-13 12:36                           ` Matt Corallo
2025-06-13 13:07                           ` 'Antoine Poinsot' via Bitcoin Development Mailing List
2025-06-13 15:41                             ` Jameson Lopp
2025-06-14 15:58                               ` Sjors Provoost
2025-06-14 20:05                                 ` Jameson Lopp
2025-06-14 16:06                               ` gmaxwell
2025-06-14 20:17                                 ` Jameson Lopp
2025-06-14 21:31                                   ` Greg Maxwell
2025-06-14 23:50                                     ` Sanket Kanjalkar
2025-06-15  0:01                                       ` Greg Maxwell
2025-06-15  0:20                                         ` Sanket Kanjalkar
2025-06-15 14:40                                     ` Jameson Lopp
2025-06-15 17:43                                       ` Greg Maxwell
2025-06-15 19:43                                       ` Owen Kemeys [this message]
2025-06-13  5:50       ` Anthony Towns
2025-06-12  2:06 ` Greg Maxwell
2025-06-12  3:23   ` James O'Beirne
2025-06-17 11:22 ` Steven Roose
2025-06-17 14:34   ` 'Antoine Poinsot' via Bitcoin Development Mailing List
2025-06-17 16:40     ` Harsha Goli
2025-06-17 18:19     ` /dev /fd0

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=e65b99a8-5234-451d-b62e-9484c2d59c76n@googlegroups.com \
    --to=owenjk@gmail$(echo .)com \
    --cc=bitcoindev@googlegroups.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox