「Hardware wallet」の版間の差分

提供: tezos-wiki
移動先: 案内、 検索
 
1行目: 1行目:
−
A '''hardware wallet''' is a special type of [[wallet|bitcoin wallet]] which stores the user's private keys in a secure hardware device.
+
{{#seo:
 +
|title=Hardware wallet. All about cryptocurrency - Bitcoin Wiki
 +
|keywords=blockchain projects, hardware wallet, wallet, hardware, trezor, bitkey, opendime, bitcoin stick, storage, bitcoin
 +
|description=Hardware wallet is a special type of bitcoin wallet which stores the user's private keys in a secure hardware device. To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new.
 +
}}
  
−
They have major advantages over standard software wallets:
+
'''Hardware wallet''' is a physical electronic device, built for the sole purpose of securing bitcoins. The core innovation is that the hardware wallet must be connected to your computer, phone, or tablet before [[bitcoin]]s may be spent. Hardware wallets are a good choice if you’re serious about security and convenient, reliable Bitcoin storage.
  
−
* private keys are often stored in a protected area of a microcontroller, and cannot be transferred out of the device in plaintext
+
Bitcoin hardware wallets keep private keys separate from vulnerable, internet-connected devices. Your all-important private keys are maintained in a secure offline environment on the hardware wallet, fully protected even should the device be plugged into a [[malware]]-infected computer. As bitcoins are digital, cybercriminals could, potentially, target your computer’s “[[software]] wallet” and steal them by accessing your private key.
−
* immune to computer viruses that steal from software wallets
 
−
* can be used securely and interactively, as opposed to a [[paper wallet]] which must be imported to software at some point
 
−
* much of the time, the software is open source, allowing a user to validate the entire operation of the device
 
  
−
This page is an attempt to summarize all the known developments of hardware wallets that can use Bitcoin as part of their operation.
+
The three most popular and best Bitcoin hardware wallets are:
 +
* Ledger Nano S
 +
* TREZOR
 +
* KeepKey
  
−
== Security risks ==
+
Generating and storing private keys offline using a hardware wallet ensures that hackers have no way to reach your bitcoins. Hackers would have to steal the hardware wallet itself, but even then, it can be protected with a PIN code. Don’t worry about your hardware wallet getting stolen, lost or damaged either; so long as you create a secret backup code, you can always retrieve your bitcoins.
  
−
To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new, but at least for the time being they have maintained a good track record, unlike the numerous incidents of Bitcoin theft from Internet-connected computers.
+
==Description==
 +
Hardware wallets are not free, but the price can be worth it if you own a significant amount of bitcoins. A hardware wallet will protect a few hundred in Bitcoin just as effectively as a few million.
  
−
However, it's important to understand that hardware wallets are a high value target and depend on various assumptions holding true to maintain security. They are not a silver bullet, and there are several realistic ways in which a hardware wallet can fail to protect your Bitcoin. These risks need to be carefully considered when deciding how much trust to place in a hardware wallet, and which hardware wallet to buy.
+
====How Hardware Wallets Work====
 +
Hardware wallets are secure, offline devices. They store your private keys offline so they can't be hacked. This means you can even use one on a malware infected computer.
  
−
How a hardware wallet could fail to protect your Bitcoin:
+
====Why A Hardware Wallet with a Screen is Important====
 +
In the table below, you'll notice we show which hardware wallets have screens. Screens provide extra security by verifying and displaying important wallet details. Since the hardware wallet is nearly impossible to hack, its screen is more trustworthy than data displayed on your computer.
  
−
# '''Malware swaps recipient Bitcoin addresses''': a hardware wallet won't protect you from being tricked into sending Bitcoin to the wrong address. For example, malware on a PC could monitor for high value transactions and then swap out the recipient's authentic Bitcoin address for an address controlled by the attacker. When the stakes are high, multi factor (e.g., over the phone) confirmation of a recipient's Bitcoin address is recommended.
+
== Security Risks with Hardware Wallets ==
−
# '''Insecure RNG ([https://en.wikipedia.org/wiki/Random_number_generation Random Number Generator])''': hardware wallets rely on the security of an RNG, often embedded in hardware, to generate your wallet's private keys securely. Unfortunately, it is notoriously difficult to verify the true randomness of the RNG. An insecure RNG may create wallet keys that can later be recreated by an attacker, by generating psuedo-randomness that would seem statistically indistinguishable from true randomness yet still be predictable to an advanced attacker. An RNG may become insecure as a result of malicious weakening or an unintentional mistake. This failure mode is common to any wallet generation procedure in which the true randomness of the source of entropy being used can not be verified.
+
No matter which wallet you choose, remember: '''Your bitcoins are only safe if the [[private key]] was generated securely, remains a secret, and--most importantly--is controlled only by YOU!'''
−
# '''Imperfect implementation''': the security of all computing devices relies on the quality of their implementation. Hardware wallets are no exception. Bugs at the software, firmware or hardware level may allow attackers to break into a hardware wallet and gain unauthorized access to secrets. Even if the design is perfect, proving the security of a hardware or software implementation is a very hard, mostly unsolved problem. To date, no wallet in existence is implemented using provably correct software.
+
 
−
# '''Compromised production process''': even a perfect software and hardware implementation of a hardware wallet would be vulnerable to a corrupt production process that introduces intentional or unintentional holes into the final product. The introduction of hardware backdoors is a [https://www.wired.com/2016/06/demonically-clever-backdoor-hides-inside-computer-chip/ real concern] for high risk financial and military applications.
+
Here are two examples where users got ripped off by leaving bitcoins in the care of a third party:
−
# '''Compromised shipping process''': a compromised fulfillment process may substitute or modify secure devices for superficially identical but insecure replacements. Government programs that intercept hardware and modify them in route to insert backdoors [https://arstechnica.com/.../photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ are known to exist].
+
# The Bitfinex hack, in which users lost $70 million
 +
# The failure of Mt Gox, in which users lost $450 million or more
 +
 
 +
To avoid theft, scams, and any other loss of funds, follow these three basic principles:
 +
* Generate your private keys in a secure, offline environment. (Except if using trivial amounts, in which cases keys may be created in a hot wallet).
 +
* Create backups of your private keys. This helps to protect against the loss of your bitcoins due to hard drive failure or some other problem or accident. Ideally you should have a duplicate set of backups kept off-site to protect against the possibility of fire, robbery, etc.
 +
* Encrypt wallets to provide additional security. This helps prevent the physical theft of your funds in the event that your device or hardware wallet is stolen. Securing your bitcoins properly is the most important step for any Bitcoin user.
 +
 
 +
With Bitcoin you have the privilege - but also the responsibility - to safeguard your own money. There have been countless scams related to Bitcoin that could have been prevented had people not entrusted others with their bitcoins.
 +
 
 +
Hardware wallets are more secure than any other software wallet, like one that runs on your Android or iOS device, or desktop. However, hardware wallets have some unique security risks to be aware of.
 +
 
 +
====Tampering of the Device====
 +
We always recommend to order directly from the hardware seller. This is because someone can buy a hardware wallet, tamper with it, and sell it used. They could program it to steal any bitcoins or add a back door.
 +
 
 +
Most hardware wallets add some special kind of tape on the packaging to try to make any tampering more noticeable. This is another reason we recommend only ordering from the hardware wallet company, and not from a website like eBay.
 +
 
 +
====Bad Random Number Generator====
 +
Bitcoin private keys are based on cryptography. Random number generators, also called RNGs, are used to create the private keys that secure bitcoins.
 +
 
 +
If the random number generator is not random enough, that means someone else can recreate the private key of the hardware wallet easier. This attack has happened in the past with blockchain.info, a web wallet. Over 300 BTC were lost because blockchain.info did not use good RNG, so a hacker was able to generate the private keys again and steal [[coins]].
 +
 
 +
One way to help prevent this is to use the hardware wallet’s custom 25th word. TREZOR, for example, allows you to add a 25th word to the 24 word seed. This means that you can technically add your own RNG to the computer generated RNG to ensure your private key will be truly based on good RNG.
  
 
In summary:
 
In summary:
−
 
 
* While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., [[TREZOR]]).
 
* While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., [[TREZOR]]).
  
 
* [[Cold storage]] solutions implemented with open source software and general purpose hardware (e.g., [[BitKey]], Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).
 
* [[Cold storage]] solutions implemented with open source software and general purpose hardware (e.g., [[BitKey]], Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).
−
 
  
 
== Commercial hardware wallets (ordered chronologically) ==
 
== Commercial hardware wallets (ordered chronologically) ==
41行目: 68行目:
  
 
[https://www.pi-wallet.com/ pi-wallet.com]
 
[https://www.pi-wallet.com/ pi-wallet.com]
−
 
  
 
<br clear="all">
 
<br clear="all">
50行目: 76行目:
 
[[TREZOR]] is a secure bitcoin storage and a transaction signing tool. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.
 
[[TREZOR]] is a secure bitcoin storage and a transaction signing tool. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.
  
−
It uses a deterministic wallet structure which means it can hold an unlimited number of keys ([[BIP 0032]]/[[BIP 0044]]). A recovery seed is generated when the device is initialized. In case TREZOR gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another [[BIP 0039]]/[[BIP 0044]] compatible wallet.  
+
It uses a [[deterministic wallet]] structure which means it can hold an unlimited number of keys ([[BIP 0032]]/[[BIP 0044]]). A recovery seed is generated when the device is initialized. In case TREZOR gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another [[BIP 0039]]/[[BIP 0044]] compatible wallet.  
  
−
TREZOR also introduced a unique way of PIN entering preventing keyloggers from recording it even when entered on a compromised computer. An encryption passphrase can be set on top of the PIN protection. More passphrases can be used for plausible deniability.
+
The price on the TREZOR is a bit higher and is currently $110. I can’t say it justifies a higher price than the Nano S and therefor it’s in 2nd place in my opinion. However, as I’ve mentioned before, this is a great wallet and you can also read my full review of it here. Finally, the main advantage TREZOR has over its competitors is the company reputation. One of the company’s founders Marek “Slush” Palatinus, who also created the first.
  
 
[https://BuyTrezor.com E-shop BuyTrezor.com] | [https://doc.satoshilabs.com/ TREZOR Documentation] | [https://bitcointrezor.com BitcoinTrezor.com]
 
[https://BuyTrezor.com E-shop BuyTrezor.com] | [https://doc.satoshilabs.com/ TREZOR Documentation] | [https://bitcointrezor.com BitcoinTrezor.com]
58行目: 84行目:
 
<br clear="all">
 
<br clear="all">
  
−
=== Ledger HW.1 - USB Smartcard Hardware Wallet ===
+
=== Ledger HW.1 - USB Smartcard Hardware Wallet ===
 
[[File:Btchip_dongle.jpg|220px|thumb|left|HW.1 inserted in a laptop]]
 
[[File:Btchip_dongle.jpg|220px|thumb|left|HW.1 inserted in a laptop]]
  
73行目: 99行目:
 
<br clear="all">
 
<br clear="all">
  
−
=== Ledger Nano - USB Smartcard Hardware Wallet ===
+
=== Ledger Nano - USB Smartcard Hardware Wallet ===
 
[[File:ledger_wallet_photo.jpg|300px|thumb|left|Ledger Wallet USB]]
 
[[File:ledger_wallet_photo.jpg|300px|thumb|left|Ledger Wallet USB]]
  
80行目: 106行目:
 
The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.
 
The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.
  
−
The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: [[Electrum]], [[Mycelium]], [[GreenAddress]], Greenbits, [[Coinkite]] and Copay.
+
The [[Ledger Wallet]] Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: [[Electrum]], [[MyCelium]], [[GreenAddress]], Greenbits, [[Coinkite]] and Copay.
  
 
[https://www.ledgerwallet.com/products/1-ledger-nano Ledger Nano product page] | [https://github.com/LedgerHQ Source and specifications]
 
[https://www.ledgerwallet.com/products/1-ledger-nano Ledger Nano product page] | [https://github.com/LedgerHQ Source and specifications]
86行目: 112行目:
 
<br clear="all">
 
<br clear="all">
  
−
=== Ledger Unplugged - NFC Smartcard Hardware Wallet ===
+
=== Ledger Unplugged - NFC Smartcard Hardware Wallet ===
 
[[File:ledger_unplugged_photo.jpg|300px|thumb|left|Ledger Unplugged NFC]]
 
[[File:ledger_unplugged_photo.jpg|300px|thumb|left|Ledger Unplugged NFC]]
  
112行目: 138行目:
 
[[File:keepkey.jpg|300px|thumb|left|KeepKey showing a bitcoin transaction that needs to be manually approved.]]
 
[[File:keepkey.jpg|300px|thumb|left|KeepKey showing a bitcoin transaction that needs to be manually approved.]]
  
−
KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.
+
First, the wallet is too big for carrying in your pocket conveniently. The size of the Keepkey wallet is almost twice of the TREZOR or Ledger Nano S (as can be seen in the image above). Second, the company hasn’t built enough reputation in the community.
 +
Additional things that make me hesitate regarding buying the product are:
 +
* I have written to their support several times but haven’t gotten a response yet
 +
* Their support page SSL certificate seems invalid
 +
* Some bad reviews from the past few month on Amazon</a> seem to question the products reliability
  
−
KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a [[BIP 0039]] recovery seed. This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper wallets.  
+
On the bright side, Keepkey supports a wide variety of altcoins including&nbsp;Bitcoin, Litecoin, Dogecoin, Namecoin, Testnet, Ethereum, and Dash. Keepkey currently sales for $129.
  
 
[https://www.keepkey.com keepkey.com]
 
[https://www.keepkey.com keepkey.com]
129行目: 159行目:
 
Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.
 
Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.
  
−
It comes in the shape of a mini USB, and [[Opendime-ui.png|setting it up is astonishingly quick and simple]]. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.
+
It comes in the shape of a mini USB, and setting it up is astonishingly quick and simple. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.
  
 
[http://www.opendime.com Opendime.com]
 
[http://www.opendime.com Opendime.com]
136行目: 166行目:
 
* You can watch a [https://www.youtube.com/watch?v=9UFF9d3Y1BY video here]
 
* You can watch a [https://www.youtube.com/watch?v=9UFF9d3Y1BY video here]
 
* Read this [https://medium.com/@beautyon_/exquisite-opendime-ad1195a2790e review]
 
* Read this [https://medium.com/@beautyon_/exquisite-opendime-ad1195a2790e review]
−
* Multi-language user interface: 中文 • 日本語 • English • Portuguese • Français • Deutsch • Русский
+
* Multi-language user interface: 中文 * 日本語 * English * Portuguese * Français * Deutsch * Русский
 
* Works as USB drive with no need for software
 
* Works as USB drive with no need for software
 
* [https://github.com/opendime/electrum Opendime Electrum plugin]
 
* [https://github.com/opendime/electrum Opendime Electrum plugin]
159行目: 189行目:
  
 
=== BlochsTech card: Your user friendly Bitcoin wallet ===
 
=== BlochsTech card: Your user friendly Bitcoin wallet ===
−
<!-- 2016-04-09: Possible vaporware / scam? Website insecure & badly designed with no substantial info. Consider finding technical docs, real reviews or removing this device. -->
+
<!-- 2016-04-09: Possible vaporware / scam? Website insecure & badly designed with no substantial info. Consider finding technical docs, [[REAL|real]] reviews or removing this device. -->
  
 
[[file:BlochsTech Bitcoin card hardware wallet.jpg|300px|thumb|left|Graphic printed on front of BlochsTech cards.]]
 
[[file:BlochsTech Bitcoin card hardware wallet.jpg|300px|thumb|left|Graphic printed on front of BlochsTech cards.]]
  
−
The BlochsTech open Bitcoin card is an open protocol secure hardware Bitcoin wallet your grandmother could use.
+
The BlochsTech open Bitcoin card is an open protocol secure hardware [[Bitcoin wallet]] your grandmother could use.
 
For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.
 
For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.
  
172行目: 202行目:
  
 
<br clear="all">
 
<br clear="all">
−
 
−
 
  
 
=== BitLox Bitcoin Hardware Wallet ===
 
=== BitLox Bitcoin Hardware Wallet ===
 
[[file:Bitlox.jpg|300px|thumb|left|BitLox Bitcoin Hardware Wallet]]
 
[[file:Bitlox.jpg|300px|thumb|left|BitLox Bitcoin Hardware Wallet]]
  
−
BitLox is a metal cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.
+
BitLox is a [[metal]] cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.
  
 
At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.
 
At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.
199行目: 227行目:
 
* [https://github.com/digitalbitbox Open Source] ([https://github.com/digitalbitbox/mcu#digital-bitbox-firmware firmware], [https://github.com/digitalbitbox/mcu/blob/bf48984fd4a47d9ebf6814f7d01b078964587c7c/src/bootloader.c bootloader], [https://github.com/digitalbitbox/dbb-app desktop client]).
 
* [https://github.com/digitalbitbox Open Source] ([https://github.com/digitalbitbox/mcu#digital-bitbox-firmware firmware], [https://github.com/digitalbitbox/mcu/blob/bf48984fd4a47d9ebf6814f7d01b078964587c7c/src/bootloader.c bootloader], [https://github.com/digitalbitbox/dbb-app desktop client]).
 
* Full FIDO U2F support (https://en.wikipedia.org/wiki/Universal_2nd_Factor)
 
* Full FIDO U2F support (https://en.wikipedia.org/wiki/Universal_2nd_Factor)
−
* Made in Switzerland (a country with strong privacy laws) by [[Bitcoin Core]] developer Jonas Schnelli.
+
* Made in Switzerland (a country with strong [[privacy]] laws) by [[Bitcoin Core]] developer Jonas Schnelli.
  
 
[https://digitalbitbox.com digitalbitbox.com]
 
[https://digitalbitbox.com digitalbitbox.com]
205行目: 233行目:
 
<br clear="all">
 
<br clear="all">
  
−
=== Ledger Nano S - USB Smartcard Hardware Wallet ===
+
=== Ledger Nano S - USB Smartcard Hardware Wallet ===
 
[[File:ledger_wallet_nanos_photo.png|300px|thumb|left|Ledger Wallet Nano S]]
 
[[File:ledger_wallet_nanos_photo.png|300px|thumb|left|Ledger Wallet Nano S]]
  
 
Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.
 
Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.
 +
 +
I’ve not long ago and was absolutely impressed. The company, that used to be the second runner up in the Bitcoin hardware wallet race seemed to have matched it’s main opponent TREZOR. The Nano S has a sleek design, intuitive user interface, a wide support of altcoins (Ethereum, Litecoin, Dogecoin, Zcash, Dash, Stratis) and most importantly an attractive price tag. At the moment the Nano S sells for&nbsp;€79 which is around $99 making it the most affordable hardware wallet from the top 3 as well.
  
 
Main features:
 
Main features:
232行目: 262行目:
 
The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.  
 
The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.  
  
−
The device currently have Bitcoin and Ethereum wallets. More upgrades coming to include other altcoin wallets (e.g. Bitcoin Cash, EOT Coin).  
+
The device currently have Bitcoin and [[Ethereum]] wallets. More upgrades coming to include other altcoin wallets (e.g. [[Bitcoin Cash]], EOT Coin).  
  
 
[https://swissbankinyourpocket.com/ swissbankinyourpocket.com]
 
[https://swissbankinyourpocket.com/ swissbankinyourpocket.com]
  
 
<br clear="all">
 
<br clear="all">
−
 
−
=== Secalot ===
 
−
[[File:secalot_wallet.png|300px|thumb|left|Secalot]]
 
−
 
−
Main features:
 
−
* Software and hardware are fully open sourced.
 
−
* Utilizes a secure microcontroller with a high performance dedicated cryptographic co-processor.
 
−
* Integrates with the popular Electrum wallet.
 
−
* PIN-code protected.
 
−
* Confirm transactions with a touch button press on the device.
 
−
* Supports P2PKH, P2SH, and segWit transactions.
 
−
* Updatable firmware.
 
−
* Extra functionality: OpenPGP smart card, FIDO U2F authenticator, one-time password generator.
 
−
 
−
Website: [https://www.secalot.com www.secalot.com]
 
−
 
−
<br clear="all">
 
−
 
  
 
== Not purchasable hardware wallets ==
 
== Not purchasable hardware wallets ==
296行目: 308行目:
 
See [[Smart card wallet]]
 
See [[Smart card wallet]]
  
−
== Related Resources ==
+
==Sources==
 +
* [https://en.bitcoin.it/wiki/Hardware_wallet https://en.bitcoin.it/wiki/Hardware_wallet]
 +
 
 +
== External links==
 
* [https://bitcoinnewsmagazine.com/best-bitcoin-hardware-wallet-2015/ Best Bitcoin Hardware Wallet 2015] - reviews of all bitcoin hardware wallets.
 
* [https://bitcoinnewsmagazine.com/best-bitcoin-hardware-wallet-2015/ Best Bitcoin Hardware Wallet 2015] - reviews of all bitcoin hardware wallets.
 
* [http://99bitcoins.com/trezor-vs-ledger-hands-hardware-wallets-review/ TREZOR vs. Ledger] - User reviews and Reddit feedback
 
* [http://99bitcoins.com/trezor-vs-ledger-hands-hardware-wallets-review/ TREZOR vs. Ledger] - User reviews and Reddit feedback
306行目: 321行目:
  
 
== See Also ==
 
== See Also ==
−
 
−
* [[Storing bitcoins]]
 
 
* [[How to set up a secure offline savings wallet]]
 
* [[How to set up a secure offline savings wallet]]
 
* [[Cold storage]]
 
* [[Cold storage]]
−
 
+
* [[CloudHashing]]
−
[[Category:Security]]
+
* [[Casascius physical bitcoins]]
−
[[Category:Wallets]]
+
* [[Armory]]
−
[[Category:Hardware]]
 

2018年4月2日 (月) 19:44時点における版

Hardware wallet is a physical electronic device, built for the sole purpose of securing bitcoins. The core innovation is that the hardware wallet must be connected to your computer, phone, or tablet before bitcoins may be spent. Hardware wallets are a good choice if you’re serious about security and convenient, reliable Bitcoin storage.

Bitcoin hardware wallets keep private keys separate from vulnerable, internet-connected devices. Your all-important private keys are maintained in a secure offline environment on the hardware wallet, fully protected even should the device be plugged into a malware-infected computer. As bitcoins are digital, cybercriminals could, potentially, target your computer’s “software wallet” and steal them by accessing your private key.

The three most popular and best Bitcoin hardware wallets are:

  • Ledger Nano S
  • TREZOR
  • KeepKey

Generating and storing private keys offline using a hardware wallet ensures that hackers have no way to reach your bitcoins. Hackers would have to steal the hardware wallet itself, but even then, it can be protected with a PIN code. Don’t worry about your hardware wallet getting stolen, lost or damaged either; so long as you create a secret backup code, you can always retrieve your bitcoins.

Description

Hardware wallets are not free, but the price can be worth it if you own a significant amount of bitcoins. A hardware wallet will protect a few hundred in Bitcoin just as effectively as a few million.

How Hardware Wallets Work

Hardware wallets are secure, offline devices. They store your private keys offline so they can't be hacked. This means you can even use one on a malware infected computer.

Why A Hardware Wallet with a Screen is Important

In the table below, you'll notice we show which hardware wallets have screens. Screens provide extra security by verifying and displaying important wallet details. Since the hardware wallet is nearly impossible to hack, its screen is more trustworthy than data displayed on your computer.

Security Risks with Hardware Wallets

No matter which wallet you choose, remember: Your bitcoins are only safe if the private key was generated securely, remains a secret, and--most importantly--is controlled only by YOU!

Here are two examples where users got ripped off by leaving bitcoins in the care of a third party:

  1. The Bitfinex hack, in which users lost $70 million
  2. The failure of Mt Gox, in which users lost $450 million or more

To avoid theft, scams, and any other loss of funds, follow these three basic principles:

  • Generate your private keys in a secure, offline environment. (Except if using trivial amounts, in which cases keys may be created in a hot wallet).
  • Create backups of your private keys. This helps to protect against the loss of your bitcoins due to hard drive failure or some other problem or accident. Ideally you should have a duplicate set of backups kept off-site to protect against the possibility of fire, robbery, etc.
  • Encrypt wallets to provide additional security. This helps prevent the physical theft of your funds in the event that your device or hardware wallet is stolen. Securing your bitcoins properly is the most important step for any Bitcoin user.

With Bitcoin you have the privilege - but also the responsibility - to safeguard your own money. There have been countless scams related to Bitcoin that could have been prevented had people not entrusted others with their bitcoins.

Hardware wallets are more secure than any other software wallet, like one that runs on your Android or iOS device, or desktop. However, hardware wallets have some unique security risks to be aware of.

Tampering of the Device

We always recommend to order directly from the hardware seller. This is because someone can buy a hardware wallet, tamper with it, and sell it used. They could program it to steal any bitcoins or add a back door.

Most hardware wallets add some special kind of tape on the packaging to try to make any tampering more noticeable. This is another reason we recommend only ordering from the hardware wallet company, and not from a website like eBay.

Bad Random Number Generator

Bitcoin private keys are based on cryptography. Random number generators, also called RNGs, are used to create the private keys that secure bitcoins.

If the random number generator is not random enough, that means someone else can recreate the private key of the hardware wallet easier. This attack has happened in the past with blockchain.info, a web wallet. Over 300 BTC were lost because blockchain.info did not use good RNG, so a hacker was able to generate the private keys again and steal coins.

One way to help prevent this is to use the hardware wallet’s custom 25th word. TREZOR, for example, allows you to add a 25th word to the 24 word seed. This means that you can technically add your own RNG to the computer generated RNG to ensure your private key will be truly based on good RNG.

In summary:

  • While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., TREZOR).
  • Cold storage solutions implemented with open source software and general purpose hardware (e.g., BitKey, Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).

Commercial hardware wallets (ordered chronologically)

Pi Wallet - cold storage

ファイル:Piwallet.jpeg
Pi-Wallet

The Pi-Wallet is a small computer with the Armory bitcoin client.

Transactions are signed offline, then transferred on a USB stick via Sneakernet to an online system for broadcasting.

pi-wallet.com


TREZOR The Bitcoin Safe

ファイル:Trezor-tx.jpg
Confirming the transaction with TREZOR

TREZOR is a secure bitcoin storage and a transaction signing tool. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.

It uses a deterministic wallet structure which means it can hold an unlimited number of keys (BIP 0032/BIP 0044). A recovery seed is generated when the device is initialized. In case TREZOR gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another BIP 0039/BIP 0044 compatible wallet.

The price on the TREZOR is a bit higher and is currently $110. I can’t say it justifies a higher price than the Nano S and therefor it’s in 2nd place in my opinion. However, as I’ve mentioned before, this is a great wallet and you can also read my full review of it here. Finally, the main advantage TREZOR has over its competitors is the company reputation. One of the company’s founders Marek “Slush” Palatinus, who also created the first.

E-shop BuyTrezor.com | TREZOR Documentation | BitcoinTrezor.com


Ledger HW.1 - USB Smartcard Hardware Wallet

ファイル:Btchip dongle.jpg
HW.1 inserted in a laptop

HW.1 is an implementation of a deterministic (BIP 0032) Hardware Wallet on a USB smartcard.

It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.

Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.

It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.

E-shop | Technical Documentation


Ledger Nano - USB Smartcard Hardware Wallet

ファイル:Ledger wallet photo.jpg
Ledger Wallet USB

Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.

The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.

The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: Electrum, MyCelium, GreenAddress, Greenbits, Coinkite and Copay.

Ledger Nano product page | Source and specifications


Ledger Unplugged - NFC Smartcard Hardware Wallet

ファイル:Ledger unplugged photo.jpg
Ledger Unplugged NFC

The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.

The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).

Ledger Unplugged product page | Source code


BWALLET TREZOR clone

ファイル:BWALLET Trezor Clone.jpeg
Chinese clone of Trezor

BWALLET is a clone of Trezor by a Chinese company. Trezor code is open source and this device operates like a Trezor. However, this product has been reviewed by Merek aka Slush(Trezor developer) and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with myTREZOR.com website and it does not work with Trezor official firmware.

MyBWALLET.com | Buy BWALLET


KeepKey: Your Private Bitcoin Vault

ファイル:Keepkey.jpg
KeepKey showing a bitcoin transaction that needs to be manually approved.

First, the wallet is too big for carrying in your pocket conveniently. The size of the Keepkey wallet is almost twice of the TREZOR or Ledger Nano S (as can be seen in the image above). Second, the company hasn’t built enough reputation in the community. Additional things that make me hesitate regarding buying the product are:

  • I have written to their support several times but haven’t gotten a response yet
  • Their support page SSL certificate seems invalid
  • Some bad reviews from the past few month on Amazon</a> seem to question the products reliability

On the bright side, Keepkey supports a wide variety of altcoins including Bitcoin, Litecoin, Dogecoin, Namecoin, Testnet, Ethereum, and Dash. Keepkey currently sales for $129.

keepkey.com


Opendime: Bitcoin Credit Stick

ファイル:Opendime.jpeg
Opendime Package

The 1st Bitcoin Bearer Bond or just call it a "Bitcoin Stick"

Opendime is a small USB stick that allows you to spend Bitcoin like a dollar bill. Pass it along multiple times. Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.

It comes in the shape of a mini USB, and setting it up is astonishingly quick and simple. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.

Opendime.com


CoolWallet: The Ultimate Bitcoin Safe

ファイル:CoolWallet in the box.jpeg
CoolWallet showing Launch App, waiting for user to connect with smartphone via Bluetooth

CoolWallet is a credit card sized Bluetooth device that stores and secures your bitcoins and private keys. It fits in your wallet and works wirelessly.

Every Bitcoin transaction must be manually confirmed and approved through its e-paper display and button.

CoolWallet only acknowledges the paired smartphone. Whoever stole the CoolWallet are not able to steal any bitcoins. Using recovery Seed can restore all your bitcoins in case you lost the device.

coolbitx.com | Source and specifications


BlochsTech card: Your user friendly Bitcoin wallet

ファイル:BlochsTech Bitcoin card hardware wallet.jpg
Graphic printed on front of BlochsTech cards.

The BlochsTech open Bitcoin card is an open protocol secure hardware Bitcoin wallet your grandmother could use. For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.

Currently it's of course in a novelty phase like Casascius coins (of which thousands were sold), however in the long run it is fully capable of functionally replacing the VISA system in all nations.

BlochsTech.com


BitLox Bitcoin Hardware Wallet

ファイル:Bitlox.jpg
BitLox Bitcoin Hardware Wallet

BitLox is a metal cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.

At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.

Bitlox allows you to set up hidden wallets. Unlike other hardware wallets your seed is never displayed on a connected computer or phone but only on the Bitlox. All your wallet, device and transaction PINs are only entered on the BitLox and never on any app.

BitLox has also implemented several advanced security features not available on any other bitcoin hardware wallet.

bitlox.com


Digital Bitbox

ファイル:Digital-bitbox.png
Digital Bitbox Hardware Wallet

digitalbitbox.com


Ledger Nano S - USB Smartcard Hardware Wallet

ファイル:Ledger wallet nanos photo.png
Ledger Wallet Nano S

Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.

I’ve not long ago and was absolutely impressed. The company, that used to be the second runner up in the Bitcoin hardware wallet race seemed to have matched it’s main opponent TREZOR. The Nano S has a sleek design, intuitive user interface, a wide support of altcoins (Ethereum, Litecoin, Dogecoin, Zcash, Dash, Stratis) and most importantly an attractive price tag. At the moment the Nano S sells for €79 which is around $99 making it the most affordable hardware wallet from the top 3 as well.

Main features:

  • cryptographic secrets protected by a secure chip
  • open source embedded Bitcoin app
  • Confirmation of transactions on the embedded screen
  • Built-in 4 digits PIN security lock
  • Built-in onboarding (seed generation and recovery)
  • BIP39 seed (12/18/24 words), easy backup and restoration
  • Multi-apps support: FIDO U2F, GPG, SSH…
  • USB connectivity
  • Foldable and compact casing

Ledger Nano S product page


Swiss Bank in Your Pocket - Hardware wallet

ファイル:SBIYP.png
Swiss Bank In Your Pocket

The Swiss Bank in Your Pocket is a Windows Desktop Application providing functionality for 5 Bitcoin Wallets and a Bitcoin Vault.

The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.

The device currently have Bitcoin and Ethereum wallets. More upgrades coming to include other altcoin wallets (e.g. Bitcoin Cash, EOT Coin).

swissbankinyourpocket.com


Not purchasable hardware wallets

BitcoinCard Megion Technologies-Card based wallet

ファイル:Bitcoincard-medley-large.jpg
Bitcoin Card

Bitcoincard Home Page

Excellent review by evoorhees

Incorporates a e-paper display, keypad, and radio (custom ISM band protocol.) Unfortunately it is fairly limited in terms of transaction I/O, requiring a radio gateway or another bitcoincard wherever funds need to be transferred.


BitSafe - allten/someone42's hardware wallet

ファイル:Bitsafe-wallet-sizecompare.jpg
Bitsafe wallet

Final BitSafe announcement

Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.

someone42's original prototype

ファイル:Someone42-wallet-prototype.jpg
someone42's original prototype

Hardware Bitcoin wallet - a minimal Bitcoin wallet for embedded devices

Signing transactions only, requires USB host software for transactions & USB power. All work is rolled into the above BitSafe wallet currently.

Other/Defunct but with good discussion:

Seems to have gone defunct around Dec 2011. Some good ideas though and seemed to have started on execution.
Great discussion and good ideas from jim618. Also linked the following video:
Clemens Cap of Uni Rostock explains the Electronic Bitcoin wallet device he's working on. It's based on adafruit microtouch device.
The use of Yubikeys. They only support symmetric crypto, so you'd have to trust the host device.

Smart Card based wallets

This type of device requires complete trust in the host device, as there is no method for user input. See Smart card wallet

Sources

External links

See Also

「http://tezos-wiki.jp/wiki/index.php?title=Hardware_wallet&oldid=9647」から取得