Hardware wallet
hardware wallet は、ユーザーの秘密鍵を安全なハードウェアデバイスに格納する特別なタイプの bitcoin walletです。
標準的なソフトウェアウォレットよりも大きな利点があります。
- 秘密鍵は、しばしばマイクロコントローラの保護された領域に格納され、デバイスから平文で転送することはできません。
ソフトウェア・ウォレットから盗むコンピュータ・ウィルスに対する免疫
- ある時点でソフトウェアにインポートする必要がある財布とは対照的に、安全かつインタラクティブに使用できます。
- 多くの場合、ソフトウェアはオープンソースであるため、ユーザーはデバイスの動作全体を検証することができます。
このページは、動作の一部としてBitcoinを使用できるハードウェア・ウォレットの既知のすべての開発を要約するためのものです。
目次
- 1 セキュリティリスク
- 2 市販のハードウェア財布(年代順)
- 2.1 Pi Wallet - cold storage
- 2.2 TREZOR The Bitcoin Safe
- 2.3 Ledger HW.1 - USB Smartcard Hardware Wallet
- 2.4 Ledger Nano - USB Smartcard Hardware Wallet
- 2.5 Ledger Unplugged - NFC Smartcard Hardware Wallet
- 2.6 BWALLET TREZOR clone
- 2.7 KeepKey: Your Private Bitcoin Vault
- 2.8 Opendime: Bitcoin Credit Stick
- 2.9 CoolWallet: The Ultimate Bitcoin Safe
- 2.10 BlochsTech card: Your user friendly Bitcoin wallet
- 2.11 BitLox Bitcoin Hardware Wallet
- 2.12 Digital Bitbox
- 2.13 Ledger Nano S - USB Smartcard Hardware Wallet
- 2.14 Swiss Bank in Your Pocket - Hardware wallet
- 2.15 Secalot
- 3 Not purchasable hardware wallets
- 4 Smart Card based wallets
- 5 Related Resources
- 6 See Also
セキュリティリスク
今日まで、ハードウェア財布から盗まれたBitcoinsの検証可能なインシデントはありませんでした。ハードウェア財布は比較的新しいものですが、少なくともインターネット接続されたコンピュータからのBitcoin盗難の数多くの事件とは異なり、当面は良好な実績を維持しています。
ただし、ハードウェア・ウォレットは高い価値の目標であり、セキュリティを維持するために必要なさまざまな前提に依存していることを理解することが重要です。彼らは銀色の弾丸ではなく、ハードウェアウォレットがあなたのBitcoinを保護できないという現実的な方法がいくつかあります。これらのリスクは、ハードウェア・ウォレットにどのくらいの信頼を置くか、また購入するハードウェア・ウォレットを決める際には注意深く検討する必要があります。
ハードウェア財布があなたのBitcoinを保護しない方法:
# 'マルウェアが受信者をスワップしますBitcoinアドレス' :ハードウェアウォレットは、間違ったアドレスにBitcoinを送信することを騙されないようにします。たとえば、PC上のマルウェアは、高価値のトランザクションを監視し、攻撃者が管理するアドレスの受信者の本物のBitcoinアドレスをスワップアウトすることができます。ステークスが高い場合、受信者のBitcoinアドレスのマルチファクタ(電話など)の確認が推奨されます。 # '安全でないRNG([1])' :ハードウェアウォレットは、ハードウェアに埋め込まれたRNGのセキュリティに依存して、ウォレットのプライベートを生成しますキーを安全に。残念なことに、RNGの真のランダム性を検証することは悪名高く難しいです。安全でないRNGは、真のランダム性と統計的に見分けがつかず、高度な攻撃者にはまだ予測可能な擬似乱数を生成することによって、攻撃者が後で再現できるウォレットキーを作成する可能性があります。悪意のある弱体化や意図せぬ間違いの結果、RNGが安全でなくなる可能性があります。この失敗モードは、使用されているエントロピー源の真のランダム性が検証できないウォレット生成プロシージャに共通しています。 # 'Imperfect implementation' :すべてのコンピューティングデバイスのセキュリティは、実装の品質に依存します。ハードウェア・ウォレットは例外ではありません。ソフトウェア、ファームウェア、またはハードウェアレベルのバグは、攻撃者がハードウェアウォレットに侵入し、秘密に不正にアクセスする可能性があります。設計が完璧であっても、ハードウェアやソフトウェアの実装のセキュリティを証明することは非常に難しく、ほとんど未解決の問題です。今日まで、証明可能な正しいソフトウェアを使用して存在するウォレットは実装されていません。 # '生産プロセスの妥協' ':ハードウェア財布の完全なソフトウェアおよびハードウェア実装でさえ、最終製品に意図的または意図しない穴を開ける腐敗した生産プロセスに対して脆弱です。ハードウェアのバックドアの導入は、高リスクの金融や軍事アプリケーションのための[2]です。 # '侵害された出荷手続き' :侵害された履行プロセスは、表面的には同一であるが安全性の低い代替品のために安全なデバイスを代替または変更することがあります。ハードウェアを傍受し、バックドアを挿入するための経路でそれらを修正する政府プログラム[3]。
要約すれば:
- 銀色のハードウェア財布ではありませんが、信頼性の高い技術力のあるセキュリティ専門家([TREZOR]など)によって製造された本物のデバイスであることが前提です。
物理的なサイコロなどの検証可能なエントロピー源を使用して、オープンソースソフトウェアと汎用ハードウェア(例:[BitKey]、Pi Wallet)で実装されたソリューションは、いくつかのユースケース(例: 、長期的な節約)。
市販のハードウェア財布(年代順)
Pi Wallet - cold storage
Pi-Walletは、[Armory]ビットコインクライアントを備えた小型コンピュータです。
トランザクションはオフラインで署名され、Sneakernetを介してUSBスティックでオンラインシステムに転送され、ブロードキャストされます。
TREZOR The Bitcoin Safe
TREZORは、安全なBitcoinストレージとトランザクション署名ツールです。秘密鍵はデバイスによって生成され、決して放置しないようにして、マルウェアによってアクセスされることはありません。
決定的な財布構造を使用しています。これは、無制限の数の鍵(BIP 0032 / BIP 0044)を保持できることを意味します。回復シードは、デバイスの初期化時に生成されます。 TREZORが紛失または盗難に遭った場合、この種子(秘密鍵、ビットコイン残高、取引履歴)を新しいデバイスまたは別の[BIP 0039] / BIP 0044互換性のあるウォレットに復元することができます。
TREZORはまた、侵入したコンピュータに侵入した場合でも、キーロガーがPINを記録するのを防ぐための独自のPIN入力方法を導入しました。暗号化パスフレーズをPIN保護の上に設定することができます。より多くのパスフレーズは、もっともらしい拒否性のために使用できます。
E-shop BuyTrezor.com | TREZOR Documentation | BitcoinTrezor.com
Ledger HW.1 - USB Smartcard Hardware Wallet
HW.1 is an implementation of a deterministic (BIP 0032) Hardware Wallet on a USB smartcard.
It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.
Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.
It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.
E-shop | Technical Documentation
Ledger Nano - USB Smartcard Hardware Wallet
Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.
The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.
The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: Electrum, Mycelium, GreenAddress, Greenbits, Coinkite and Copay.
Ledger Nano product page | Source and specifications
Ledger Unplugged - NFC Smartcard Hardware Wallet
The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.
The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).
Ledger Unplugged product page | Source code
BWALLET TREZOR clone
BWALLET is a clone of Trezor by a Chinese company. Trezor code is open source and this device operates like a Trezor. However, this product has been reviewed by Merek aka Slush(Trezor developer) and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with myTREZOR.com website and it does not work with Trezor official firmware.
KeepKey: Your Private Bitcoin Vault
KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.
KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a BIP 0039 recovery seed. This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper wallets.
Opendime: Bitcoin Credit Stick
The 1st Bitcoin Bearer Bond or just call it a "Bitcoin Stick"
Opendime is a small USB stick that allows you to spend Bitcoin like a dollar bill. Pass it along multiple times. Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.
It comes in the shape of a mini USB, and setting it up is astonishingly quick and simple. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.
- Opendime FAQ
- You can watch a video here
- Read this review
- Multi-language user interface: 中文 • 日本語 • English • Portuguese • Français • Deutsch • Русский
- Works as USB drive with no need for software
- Opendime Electrum plugin
- Opendime source files and key verification
CoolWallet: The Ultimate Bitcoin Safe
CoolWallet is a credit card sized Bluetooth device that stores and secures your bitcoins and private keys. It fits in your wallet and works wirelessly.
Every Bitcoin transaction must be manually confirmed and approved through its e-paper display and button.
CoolWallet only acknowledges the paired smartphone. Whoever stole the CoolWallet are not able to steal any bitcoins. Using recovery Seed can restore all your bitcoins in case you lost the device.
coolbitx.com | Source and specifications
BlochsTech card: Your user friendly Bitcoin wallet
The BlochsTech open Bitcoin card is an open protocol secure hardware Bitcoin wallet your grandmother could use. For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.
Currently it's of course in a novelty phase like Casascius coins (of which thousands were sold), however in the long run it is fully capable of functionally replacing the VISA system in all nations.
BitLox Bitcoin Hardware Wallet
BitLox is a metal cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.
At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.
Bitlox allows you to set up hidden wallets. Unlike other hardware wallets your seed is never displayed on a connected computer or phone but only on the Bitlox. All your wallet, device and transaction PINs are only entered on the BitLox and never on any app.
BitLox has also implemented several advanced security features not available on any other bitcoin hardware wallet.
Digital Bitbox
- Secure hardware RNG & key storage using crypto element with 50 year lifespan and an epoxy-filled case.
- Offline backup and recovery of BIP-32 seed with a micro SD card rather than BIP-39 phrase written on paper as in Trezor.
- Native software wallet client and ability to use a mobile phone for 2FA and to verify transaction details.
- Multisig out-of-the-box including Copay support.
- Open Source (firmware, bootloader, desktop client).
- Full FIDO U2F support (https://en.wikipedia.org/wiki/Universal_2nd_Factor)
- Made in Switzerland (a country with strong privacy laws) by Bitcoin Core developer Jonas Schnelli.
Ledger Nano S - USB Smartcard Hardware Wallet
Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.
Main features:
- cryptographic secrets protected by a secure chip
- open source embedded Bitcoin app
- Confirmation of transactions on the embedded screen
- Built-in 4 digits PIN security lock
- Built-in onboarding (seed generation and recovery)
- BIP39 seed (12/18/24 words), easy backup and restoration
- Multi-apps support: FIDO U2F, GPG, SSH…
- USB connectivity
- Foldable and compact casing
Swiss Bank in Your Pocket - Hardware wallet
The Swiss Bank in Your Pocket is a Windows Desktop Application providing functionality for 5 Bitcoin Wallets and a Bitcoin Vault.
The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.
The device currently have Bitcoin and Ethereum wallets. More upgrades coming to include other altcoin wallets (e.g. Bitcoin Cash, EOT Coin).
Secalot
Main features:
- Software and hardware are fully open sourced.
- Utilizes a secure microcontroller with a high performance dedicated cryptographic co-processor.
- Integrates with the popular Electrum wallet.
- PIN-code protected.
- Confirm transactions with a touch button press on the device.
- Supports P2PKH, P2SH, and segWit transactions.
- Updatable firmware.
- Extra functionality: OpenPGP smart card, FIDO U2F authenticator, one-time password generator.
Website: www.secalot.com
Not purchasable hardware wallets
BitcoinCard Megion Technologies-Card based wallet
Incorporates a e-paper display, keypad, and radio (custom ISM band protocol.) Unfortunately it is fairly limited in terms of transaction I/O, requiring a radio gateway or another bitcoincard wherever funds need to be transferred.
BitSafe - allten/someone42's hardware wallet
Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.
someone42's original prototype
Hardware Bitcoin wallet - a minimal Bitcoin wallet for embedded devices
Signing transactions only, requires USB host software for transactions & USB power. All work is rolled into the above BitSafe wallet currently.
Other/Defunct but with good discussion:
- natman3400's BitClip Jun 2011 https://bitcointalk.org/index.php?topic=24852.0
- Seems to have gone defunct around Dec 2011. Some good ideas though and seemed to have started on execution.
- jim618 hardware wallet proposal Apr 2012 Dedicated bitcoin devices - dealing with untrusted networks
- Great discussion and good ideas from jim618. Also linked the following video:
- Prof. Clemens Cap's hardware wallet? (video:)Clemens Cap about electronic bitcoin wallet at EuroBit
- Clemens Cap of Uni Rostock explains the Electronic Bitcoin wallet device he's working on. It's based on adafruit microtouch device.
- ripper234's discussion based on Yubikeys Aug 2012 Having a YUBIKEY as one of the parties for m-of-n signatures
- The use of Yubikeys. They only support symmetric crypto, so you'd have to trust the host device.
- kalleguld's hardware wallet proposal Oct 2012 Proposal: Hardware wallet (Win 3 BTC)
- Vaporware: Matthew N Wright's ellet ANN The world's first handheld Bitcoin device, the Ellet! (Vaporware)
Smart Card based wallets
This type of device requires complete trust in the host device, as there is no method for user input. See Smart card wallet
Related Resources
- Best Bitcoin Hardware Wallet 2015 - reviews of all bitcoin hardware wallets.
- TREZOR vs. Ledger - User reviews and Reddit feedback
- Hardware wallet wire protocol: slush's Hardware wallet wire protocol discussion
- Re: Split private keys: kjj's Todo List discussion for client protocol requirements
- Hardware Wallet Roundup
- Bitcoin Hardware Wallet Comparison - information about using Bitcoin hardware wallets for cold storage.
- Ledger Wallet Review