Shamir Backups, developed by Trezor’s SatoshiLabs, lets users split up their hardware wallet backup seeds.

robots

twitter:card

twitter:description

Shamir Backups Make Hardware Wallets More Secure - Bitcoin Magazine

twitter:title

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/09/Project_-_Sketch_1_201.jpg

twitter:image

Privacy &amp; security

adi shamir

hardware wallets

satoshilabs

shamir backups

Trezor

backup

backup seed

backup seeds

backups

hardware

hardware wallet

keys

lost

model t

<p>If hardware wallets have one Achilles’ heel, recovery seeds may be it. But Trezor’s <a href="https://satoshilabs.com/">SatoshiLabs</a> has figured out a solution.</p>



<p>Hardware wallets are generally considered to be among the most secure solutions for storing bitcoin. As the private keys to sign transactions never leave the device, these keys are never exposed to the internet and can, therefore, not be hacked remotely. Even with physical access to the device, subtracting the keys is no straightforward job — if it’s possible at all. (This appears to be an ongoing cat-and-mouse game between security researchers.)</p>



<p>But even if we assume that they are secure, hardware wallets can still break, get lost, get stolen or become otherwise unusable. For these cases, users should keep a backup seed: a list of a couple of dozen words typically written down on a piece of paper, from which all the device’s private keys can be generated.</p>



<p>But what if the backup seed itself gets lost or — worse — stolen?&nbsp;</p>



<h2>A New Way to Split Backup Seeds</h2>



<p>A chain is only as strong as its weakest link, and a hardware wallet is only as secure as its backup seed. If the piece of paper is stolen, the thief can claim all the coins on the hardware wallet — without any advanced technical skills. If the backup seed is lost, it is, of course, of no help when the hardware wallet is also lost, stolen or destroyed — and the coins would be inaccessible forever.</p>



<p>After more than a year of development, Prague-based SatoshiLabs, the company behind the Trezor hardware wallet, has now introduced Shamir Backups. Based on<a href="https://en.wikipedia.org/wiki/Shamir's_Secret_Sharing"> Shamir’s Secret Sharing</a>, a cryptographic algorithm created by well-known cryptographer Adi Shamir (the “S” in <a href="https://en.wikipedia.org/wiki/RSA_(cryptosystem)">RSA</a>, one of the first public key cryptosystems), Shamir Backups let users “split up” their backup seeds into several word lists or “shares.” The wallet’s private keys can then be recovered by combining some predetermined subset of the shares. SatoshiLabs’ Shamir Backups allow for the creation of up to 16 shares (and individual shares can be even further divided into sub-shares).</p>



<p>As a practical example, you could set up a two-out-of-three backup. In that case, you would generate three different word lists, and you would need any two of the three to restore your private keys. This way, you could, for example, distribute the three lists over three different locations, minimizing the risk that two of them are lost (say, in a fire) or stolen.&nbsp;</p>



<p>If an attacker manages to steal only one of three backup seeds, it would be of no use to them at all (as opposed to cutting a normal backup seed into multiple pieces; stealing some of these pieces could enable an attacker to guess or brute-force the remaining words). Meanwhile, if only one of the three shares is lost, the remaining two can be used to restore the wallet.</p>



<h2>Open Standard</h2>



<p>Shamir Backups are available for SatoshiLabs’ Trezor Model T, the company’s latest hardware wallet. Users who already have a Trezor Model T can opt to migrate to a Shamir Backup using<a href="https://wiki.trezor.io/User_manual-Moving_funds_to_a_wallet_with_a_newly_generated_seed"> this guide</a>. New users can follow the regular<a href="https://wiki.trezor.io/User_manual-Creating_a_wallet_with_Shamir_Backup"> setup guide</a>. As an open standard (<a href="https://github.com/satoshilabs/slips/blob/master/slip-0039.md">SatoshiLabs Improvement Proposal 0039</a>), other wallet providers could opt to follow in SatoshiLabs’ footsteps and offer Shamir Backups down the road as well.</p>



<p>For more information on Shamir Backups, also see SatoshiLabs’<a href="https://blog.trezor.io/shamir-backup-the-revolution-of-private-keys-backup-is-here-858687ed7fe7"> blog post</a> announcing the solution and its additional<a href="https://blog.trezor.io/shamir-backup-a-new-security-standard-3aa42a6ebb5f"> detailed guide</a>.</p>



<figure class="wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
https://youtu.be/cRh-NCvHkzM
</div></figure>

Bitcoin Magazine provides news, analysis, information, commentary and price data about Bitcoin.

Bitcoin Magazine

Aaron van Wirdum is interested in decentralized consensus, FOSS, privacy in the digital age, censorship resistant payments, and more of that stereotypical Bitcoin stuff. Hodls BTC. (tip address / tippin.me / PayNym)

Aaron van Wirdum

Shamir Backups Make Hardware Wallets More Secure

Shamir Backups, developed by Trezor&rsquo;s SatoshiLabs, lets users split up their hardware wallet backup seeds and potentially make them more secure.

If hardware wallets have one Achilles&rsquo; heel, recovery seeds may be it. But Trezor&rsquo;s SatoshiLabs has figured out a solution. Hardware wallets are generally considered to be among the most secure solutions for storing bitcoin. As the private keys to sign transactions never leave the device, these keys are never exposed to the internet and can, therefore, not be hacked remotely. Even with physical access to the device, subtracting the keys is no straightforward job &mdash; if it&rsquo;s possible at all. (This appears to be an ongoing cat-and-mouse game between security researchers.) But even if we assume that they are secure, hardware wallets can still break, get lost, get stolen or become otherwise unusable. For these cases, users should keep a backup seed: a list of a couple of dozen words typically written down on a piece of paper, from which all the device&rsquo;s private keys can be generated. But what if the backup seed itself gets lost or &mdash; worse &mdash; stolen?&nbsp; A New Way to Split Backup Seeds. A chain is only as strong as its weakest link, and a hardware wallet is only as secure as its backup seed. If the piece of paper is stolen, the thief can claim all the coins on the hardware wallet &mdash; without any advanced technical skills. If the backup seed is lost, it is, of course, of no help when the hardware wallet is also lost, stolen or destroyed &mdash; and the coins would be inaccessible forever. After more than a year of development, Prague-based SatoshiLabs, the company behind the Trezor hardware wallet, has now introduced Shamir Backups. Based on Shamir&rsquo;s Secret Sharing, a cryptographic algorithm created by well-known cryptographer Adi Shamir (the &ldquo;S&rdquo; in RSA, one of the first public key cryptosystems), Shamir Backups let users &ldquo;split up&rdquo; their backup seeds into several word lists or &ldquo;shares.&rdquo; The wallet&rsquo;s private keys can then be recovered by combining some predetermined subset of the shares. SatoshiLabs&rsquo; Shamir Backups allow for the creation of up to 16 shares (and individual shares can be even further divided into sub-shares). As a practical example, you could set up a two-out-of-three backup. In that case, you would generate three different word lists, and you would need any two of the three to restore your private keys. This way, you could, for example, distribute the three lists over three different locations, minimizing the risk that two of them are lost (say, in a fire) or stolen.&nbsp; If an attacker manages to steal only one of three backup seeds, it would be of no use to them at all (as opposed to cutting a normal backup seed into multiple pieces; stealing some of these pieces could enable an attacker to guess or brute-force the remaining words). Meanwhile, if only one of the three shares is lost, the remaining two can be used to restore the wallet. Open Standard. Shamir Backups are available for SatoshiLabs&rsquo; Trezor Model T, the company&rsquo;s latest hardware wallet. Users who already have a Trezor Model T can opt to migrate to a Shamir Backup using this guide. New users can follow the regular setup guide. As an open standard (SatoshiLabs Improvement Proposal 0039), other wallet providers could opt to follow in SatoshiLabs&rsquo; footsteps and offer Shamir Backups down the road as well. For more information on Shamir Backups, also see SatoshiLabs&rsquo; blog post announcing the solution and its additional detailed guide. https://youtu.be/cRh-NCvHkzM

Shamir Backups, developed by Trezor’s SatoshiLabs, lets users split up their hardware wallet backup seeds and potentially make them more secure.

Aaron van Wirdum is interested in technology and how it affects social and political structures. He has been covering Bitcoin since 2013, focusing on privacy, scalability and more. Hodls BTC.

description

max-snippet:-1, max-image-preview:large, max-video-preview:-1

Tags

adi shamir

Hardware Wallets Just Got a Bit More Secure With Trezor’s Shamir Backups