I-Coldcard I-Bitcoin Wallet Esengcupheni: Kungani I-Multisig Yakho Yakhelwe Lokhu

Umhlaba we-Bitcoin uvuke nezindaba ezinzima namuhla. Cishe i-594 BTC, cishe u-$38 million, ikhishwe kuma-wallet acishe abe ngu-500 emizuzwini embalwa. Amakheli awebenanga lutho ngaphandle kwento eyodwa: izikhiye eziyimfihlo ngemuva kwawo zenziwe ku-hardware wallet ye-Coldcard esebenzisa i-firmware ethintekile.

Uma uyiklayenti le-SimplB one-Bitcoin yakho ku-vault, impendulo emfushane ukuthi i-vault yakho ibambile futhi izinhlamvu zakho ziphephile. Okusele kulesi siqephu kuchaza ukuthi kungani.

Okulandelayo yilokho okwenzeke ngempela, ukuthi ubani osengozini nokuthi kungani isakhiwo sokugcina engisakha e-SimplB sasenzelwe khona kanye usuku olunjengalolu.

Okwenzeke kabi

Wonke i-wallet ye-Bitcoin iqala nge-Amagama okubuyisela, uchungechunge lokungabikezeleki okuthi konke okunye kususelwe kukho. Ukuphepha konke kwezinhlamvu zakho kuncike kulokho kungabikezeleki. Izinga lemboni li-128 bits ze-entropy. Leyo yinombolo enkulu kangangokuthi ukuyiqagela akunakwenzeka nganoma yibuphi ubuchwepheshe obuseceleni.

Iphutha: eminye i-firmware ye-Coldcard yayeka ukusebenzisa i-hardware random number generator yedivayisi yabuyela kweyi-software ebuthakathaka. Idivayisi ayinikanga isexwayiso. Akukho okwakubukeka kwehlukile esikrinini. Esikhundleni sama-128 bits, ama-seed enziwa ngokungaphansi kakhulu: cishe ama-40 bits ku-Mk3 endala nama-72 bits cishe kuma-modeli amasha e-Mk4, Mk5 ne-Q.

Ama-40 bits azwakala engacacile, ngakho awenze abambeke. Anciphisa inani lama-Amagama okubuyisela angenzeka afike cishe ku-trillion, okusemkhawulweni womhlaseli ozimisele one-hardware yekhompyutha evamile. Wenza wonke ama-Amagama okubuyisela kulowo mkhawulo, uthole amakheli angenziwa yileso naleso bese uwabheka ku-Uchungechunge lwamabhulokhi yomphakathi. Noma yiliphi ikheli elinezinhlamvu, uyalimuka. Yilokho kanye okwenzekile.

Lokhu bekuwukuhlasela kwesikhala

Umbono owodwa oyingozi uyazungeza futhi udinga ukulungiswa ngaphambi kwanoma yini enye. Lokhu kuhlasela akudingi ukuthi umuntu athinte idivayisi. Akekho ogqekeze ekhaya noma esefeni noma e-vault. Ubuthakathaka buhlala ezikhiyeni ngokwazo futhi lezo zikhiye zihlala ku-Uchungechunge lwamabhulokhi yomphakathi ukuze noma ubani azihlole. Umhlaseli wenze konke ku-laptop.

Lokho kushintsha okukuvikela ngempela. Ukugcina i-hardware wallet endaweni ephephile kuvikela ekwebiweni ngokomzimba nasekuphazamiseni, okuyingozi eyiqiniso nehlukile. Akwenzi lutho ngokumelene ne-Amagama okubuyisela ebuthaka eqagelwa isekude. Uma izinhlamvu zakho zifinyeleleka ngaleli phutha, akunandaba ukuthi idivayisi igcinwaphi.

Kungani cishe wonke i-wallet ekhutshiwe ibiyi-single-signature

Bheka ngokusondele kuma-wallet akhishiwe futhi iphethini iyaqhamuka: abe yi-single-signature ngokweqile. Idivayisi eyodwa, ukhiye owodwa, iphuzu elilodwa lokuhluleka. Uma lowo khiye owodwa ubuthaka, akukho okumela phakathi komhlaseli nezinhlamvu.

Yilesi isizathu sonke engikade ngiphikisana ngaso iminyaka, kunoma ubani ozolalela, ukuthi i-single-signature ayanele ukugcina kwesikhathi eside okungathi sína. Ukhiye owodwa yinto eyodwa engahluleka: ngephutha le-firmware njengaleli, ngokulahleka, ngokwebiwa, ngephutha. Awufuni ukuphepha kwemali eyongiwe yempilo yonke kuncike kucezu olulodwa olungenaphutha.

Kungani i-multisig ime

Izinhlamvu zamaklayenti ami zigcinwa ku- ukusetha kwe-multisig ye-2-ku-3nezikhiye ezintathu ezisatshalaliswe kubakhiqizi be-hardware abathathu abehlukene. Ukuhambisa imali udinga ezimbili kulezo zikhiye ezintathu ukuze zisayine. Ukhiye owodwa wodwa awukwazi ukwenza lutho.

Manje kusebenzise lokho kwenzeke namuhla. Ake sithi umhlaseli angakwazi ukwenza kabusha ukhiye owodwa obuthaka kulokho kusetha. Ubengaba nesignesha eyodwa kwezimbili ezidingekayo.

Izinhlamvu azihambi.

Ukumuka kwehlele abaphethe i-single-sig futhi kwashiya i-multisig ingathintwanga ngenxa yalesi sizathu kanye.

Ukusabalalisa izikhiye kubakhiqizi abehlukene yingxenye yesibili yedizayini futhi namuhla usuku lapho lusebenze khona. Iphutha kwidivayisi yomkhiqizi oyedwa lithambisa okungenani okukodwa kwezikhiye zakho ezintathu. Ezinye ezimbili, ezakhiwe ezinye izinkampani kwenye i-hardware, azithintwanga. Ukuhluleka okufanayo okubi kungadinga ukushaya abakhiqizi ababili abazimele kanyekanye, isehlakalo esingenakwenzeka kakhulu. Sekela lezo zikhiye ensimbini ezindaweni ezihlukene bese uba nokugcina okumelana nomlilo, uzamcolo nokugqwala kanye nabagebengu.

Ngisho into efanayo iminyaka: ama-hardware wallet amathathu avela kubakhiqizi abathathu abehlukene, ikakhulukazi uma omunye wawo uvela ube ne-backdoor noma i-entropy yawo ihluleke. Bekungasona isikhathi esikhululekile ukusiphakamisa. Bekuhlala kuzwakala kunobuhlanya obuncane. Namuhla kuyekile ukuba yinto engabonakali. Futhi ngizovuma: kuwo wonke amadivayisi engangicabanga ukuthi angaba yisixhumanisi esibuthaka ngelinye ilanga, i-Coldcard yayiseduze naphansi ohlwini lwami. Yileyo kanye iphuzu. Awakhi lesi sakhiwo ngoba wazi ukuthi iyiphi idivayisi ezohluleka. Uyasakha ngoba awazi futhi wenqaba ukubheja konke ekutheni uqinisile.

Lapho lokhu kushiya amaklayenti ami

Ngizoba qotho nawe. I-Coldcard ingenye yamadivayisi amathathu engiwasebenzisayo, ngakho iwumlenze owodwa we-multisig kumaklayenti aphethe leyo nhlanganisela. Manje kuze imininingwane exazulula umbuzo: ama-Amagama okubuyisela e-Coldcard e-SimplB awenziwa nhlobo yi-random number generator yedivayisi. Ngiwenza ngokuphonsa amadayisi ngokoqobo, angeniswe ngesandla, ikakhulukazi ukuze kungabikho phutha le-firmware elingakhetha ukhiye weklayenti. Iphutha lanamuhla lihlala ku-random number generator. I-Amagama okubuyisela ephonswe ngedayisi ayilokothi isondele kuyo, ngakho leli phutha alikwazi ukufinyelela izikhiye zakho.

I-hardware yengeza ungqimba lwesibili phezu kwalokho. Imodeli ese-vault yamaklayenti ami yi-Q, hhayi i-Mk3 endala esenkabeni yokukhishwa kwanamuhla. Ama-wallet akhishiwe abe ngama-Mk3 wallet anama-40 bits e-entropy cishe. Ama-40 bits anikeza cishe i-trillion yama-seed angenzeka, umkhawulo umhlaseli angawusesha nge-hardware evamile ngesikhathi esifanele. I-Q yenza ama-seed anama-72 bits cishe. Yonke i-bit eyengeziwe iphinda kabili usesho, ngakho ama-72 bits kunzima ngaphezu kwezikhathi eziyizinkulungwane zezigidi ezine ukuwaphula kunama-40. Lowo mkhawulo uhlala kude nalokho umhlaseli angakusesha ngokoqobo namuhla. Kusesekude nezinga lama-128 bits izikhiye zakho eziyifanele futhi kusesekude nomnyango ovulekile i-Mk3 evele yaba yiwo.

Bese isakhiwo. Ngisho noma umhlaseli angakwazi ngandlela thile ukwenza kabusha ukhiye, kuhlala kuwukhiye owodwa kwezimbili ezidingekayo. Ukhiye owodwa othambisiwe ku-2-ku-3 awukwazi ukuhambisa ngisho i-satoshi eyodwa. Beka ndawonye ukuphonswa kwamadayisi, izibalo ne-multisig bese leli phutha alinangozi eyiqiniso kuma-vault amaklayenti.

Ukungabi nangozi eyiqiniso akusiyo indawo engigcina kuyo. Ekubuyekezweni kwakho kwaminyaka yonke noma noma nini lapho ngikwakhela i-vault entsha, ngizohambisa i-Bitcoin yakho ku-vault lapho ukhiye we-Coldcard Q ushintshwe ngomunye owenziwe ku-firmware ethuthukisiwe, elungisiwe. Ngizoqhubeka ngibhekele lokhu njengoba imininingwane eyengeziwe iphuma futhi ngizokutshela uma kukhona okushintsha ukuhlola okungenhla. Akudingeki ukwethuka futhi akudingeki ukujaha. I-multisig yenza umsebenzi wayo ngesikhathi ngisebenza ngokubuyekeza, ngokucophelela.

Uma uphethe i-Bitcoin ngokwakho

Uma i-Bitcoin yakho isekuzigcineleni ku-single-signature Coldcard Mk1, Mk2 noma Mk3, hambisa izinhlamvu zakho ngokushesha, ngaphandle uma sezivele zithathiwe. Phatha leyo seed njengeshisiwe. Yenza i-seed entsha kudivayisi ephephile bese ususa konke kuyo namuhla, hhayi ngempelasonto. Uma use-Coldcard Q, thuthukisela ku-firmware elungisiwe ngokushesha bese ulandela isiqondiso samanje se-Coinkite, esithi ngesikhathi sokubhala kwenziwa i-seed entsha ku-firmware elungisiwe kususwe nezinhlamvu zakho njengesiqapheli. Abaphethe i-Mk4 ne-Mk5 kufanele benze okufanayo. Futhi uma namuhla kukwenze wabona ukuthi kungakanani okuncike kudivayisi eyodwa, yilesi isikhathi sokubheka i- multisig.

Uma une-Coldcard endala futhi ungaqiniseki ukuthi wenzeni, ungaqageli ngemali yakho eyongiwe. Bhukha ingcingo ubuze. Ngingakhetha kakhulu ukuphendula umbuzo onovalo kunokubuka umuntu elahlekelwa izinhlamvu abengazigcina.

// lesi sihloko siwulwazi olujwayelekile, hhayi iseluleko sezezimali noma sokuphepha esiqondene nesimo sakho. ukuthola imininingwane yobuchwepheshe yodaba lwe-coldcard, bheka isaziso esisemthethweni se-coinkite. uma ungaqiniseki ngokusetha kwakho, thola usizo ngaphambi kokuthi wenze.