Exfiltriert die Wiederherstellungsfunktion tatsächlich die Schlüssel?

[root_s2yse8vt]

Up

0

Down

::

Ich habe versucht, Informationen darüber zu finden, konnte aber keine finden.

Bei all dem Drama um die Wiederherstellungsfunktion habe ich herausgefunden, dass der Hauptmechanismus folgender ist: Opt-in – Ledger exportiert den privaten Schlüssel – der private Schlüssel wird über SSS/etc. aufgeteilt – die Chunks werden zwischen mehreren Parteien aufgeteilt

Ich konnte jedoch keine offizielle Bestätigung für den zweiten Teil finden. Es scheint mir, dass es sich um ein Missverständnis handeln könnte, da das Ledger-Gerät den Schlüssel nicht selbst exportieren kann und **Sie einfach Ihre 24-Wort-Seed-Phrase in die Software eingeben, damit er geteilt wird.**

Kann mir jemand beweisen, dass ich hier falsch/richtig liege? Gibt es zum Beispiel irgendeine Aussage von Ledger, die ausdrücklich besagt, dass das Gerät selbst den Export vornimmt? Denn sonst bin ich sehr unsicher, wie ich mich verhalten soll…

[loupiote2]

Up

0

Down

::

> It seems to me that it could have been a misunderstanding, in that the ledger device can’t export the key itself, and you just enter your 24-word seed phrase into the software for it to get split.

no, that would be extremely unsafe: your seed could be captured by keylogger malware on your computer. you should NEVER enter or type your seed words on a computer of phone!!!

The Recover service shards (i,e, splits) your seed in 3 pieces (called shards) and encrypts each piece, and this is done on the device, for safety.

Then the 3 encrypted seed shards are sent to ledger live via USB or bluetooth, and Ledger Live will in turn send them to each of the Recovery service safekeeping companies.

So it is only encrypted shards of your seed that leave the ledger, and this happens only if you sign up for the service and also confirm the action on the device itself.

[brianddk]

Up

0

Down

::

Yes, all Ledgers have a copy of what is called „the golden key“. This golden key is used to encrypt 3 „shards“ of your seed that is sent across the internet.

Danger zone is that Ledger could be compelled by authorities to „reconstitute“ these shards with the golden key and deliver it to authorities. So if you have some tax dispute or a messy divorce, you might, one day, find that your funds vanish.

[ChadRun04]

Up

0

Down

::

Yes. It sends out 3 shards created with Shamir’s secret sharing over the wire to servers on the internet. Anyone with 2 of these shards can recover.

> you just enter your 24-word seed phrase into the software for it to get split.

It pulls out the pre-BIP39 random number from which your seed is generated and shards that.

> in that the ledger device can’t export the key itself

They can do anything they wish on that firmware.

[pshirshov]

Up

0

Down

::

It does. They do not use the secure enclave properly, otherwise it won’t be possible.

The funniest fact is that it was possible (and easy) to implement Recover in a seemingly safe manner, so we would never know that they don’t store the keys properly.

And all this fuss is not about Recover, it’s about their lies. They lied about the design and the properties of their hardware.

[Autor]

Beiträge