As 2019 comes to an end, let’s take a look at the most impactful new technologies that were released for Bitcoin.

robots

2019 Bitcoin Tech in Review - Bitcoin Magazine

https://bitcoinmagazine.com/articles/bitcoins-2019-in-tech-what-this-year-brought-us-part-1/untitled_artwork_4-3

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/11/Bitcoin-Magazine.png

twitter:card

twitter:description

twitter:title

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/12/Untitled_Artwork_4.jpeg

twitter:image

Technical

2019

guix

miniscript

P2ep

shamir backups

alternative assets

binaries

bitcoin

bitcoin core

bitcoin core developers

bitcoin magazine

blockstream's sidechain

chaumian coinjoin

core developers

Bitcoin’s technical development is progressing full steam ahead. The leading cryptocurrency’s developer community, growing each year, is hard at work to improve the Bitcoin protocol and everything around it. Some of the bigger projects — <a href="https://bitcoinmagazine.com/articles/taproot-coming-what-it-and-how-it-will-benefit-bitcoin">Taproot</a>, <a href="https://bitcoinmagazine.com/articles/with-stratum-v2-braiins-plans-big-overhaul-in-pooled-bitcoin-mining">Stratum V2</a>, <a href="https://bitcoinmagazine.com/articles/secure-the-bag-cutting-transactions-in-half-to-resolve-bitcoin-network-congestion">OP_CHECKTEMPLATEVERIFY</a> and Drivechain, to name a few examples — have made much progress throughout the year and could (in some cases optimistically) be released in 2020. Meanwhile, SegWit-usage kept increasing throughout 2019, more coins are mixed through <a href="https://bitcoinmagazine.com/articles/hiddenwallet-and-samourai-wallet-join-forces-make-bitcoin-private-zerolink">Chaumian CoinJoin</a> tools each month, and a growing number of wallets and services are adopting the bech32 address standard.



But, as 2019 comes to an end, let’s take a look at which new technologies have been released in the past year.



<h2>Less Trust Required With Guix</h2>



Computers speak binary: they receive instructions from computer programs in “ones and zeros.” But humans don’t speak binary. Programs are, therefore, written in human-readable programming languages, to then be compiled (“translated”) into binary code.



But this means that when you download binaries, for example the latest Bitcoin Core release, you cannot check that it actually matches the open-source project hosted on Bitcoin Core’s GitHub repository. You are trusting whoever sent you the software or whichever webpage you downloaded it from.



To help subvert this problem, a number of Bitcoin Core developers compile Bitcoin Core’s latest release into binaries as a standard part of the release process, and cross-check that their binaries match. They cryptographically sign the binaries if they match and only if they match. These signatures can, in turn, be checked by users downloading the binaries. In this way, no single developer needs to be trusted. (Of course, users can also compile the binaries themselves, if they don’t even want to trust this group of developers.)



This is harder than it sounds, however. The process of compiling binaries is usually subject to minor variables, for example, because it’s done on different operating systems or at different speeds. This can actually result in different binaries even when compiled from the same source, making cross-checks impossible.



To solve this, Bitcoin developers use a program called Gitian. Gitian is best understood as a virtual computer within a computer, in which programs can be compiled, so they always result in the exact same binaries.



However, Gitian has the problem that Gitian itself was somewhat trusted: It relies heavily on Ubuntu binaries. This theoretically opens the door to sophisticated attacks on the Gitian process, potentially indirectly affecting the Bitcoin Core binaries users end up downloading.



Chaincode Labs engineer Carl Dong, therefore, introduced <a href="https://en.wikipedia.org/wiki/GNU_Guix">Guix</a>, a binary verification system that allows users to check that the Bitcoin Core client they download corresponds exactly with the code that Bitcoin Core developers wrote. In July 2019, the Bitcoin Core project merged support for Dong’s solution, removing another layer of trust.



“Guix allows us to construct the environment in a way where we rely on a severely reduced set of trusted binaries,” Dong<a href="https://bitcoinmagazine.com/articles/guix-makes-bitcoin-core-development-trustless"> told</a> Bitcoin Magazine earlier this year. “Most of the environment is constructed by building from a tiny binary seed, and this building process is much more auditable.”



<h2>Sidechains’ Increased Asset Offerings</h2>



2018 was the year in which Bitcoin’s first sidechains were launched: Blockstream’s Liquid and RSK Labs’ RSK, both of which are (for now) secured by a federation. A group of key-holders — well-known companies in the space — lets users effectively move bitcoin from the Bitcoin blockchain to the alternative blockchain, where the coins obey different protocol rules.



Now, as of 2019, Bitcoin sidechains are increasingly used for a wider range of assets. Liquid in particular is hosting<a href="https://blockstream.info/liquid/assets"> a list of alternative assets</a>, which under Liquid’s protocol rules allows them to change hands quickly and privately. Barring some tests and playtokens, or assets that aren’t actually used yet (like Infinite Fleet’s INF, because the game is still to be released), SideShift AI was perhaps the first company of note to deploy its native token<a href="https://help.sideshift.ai/en/articles/2834521-what-is-sai-token"> SAI</a> on the Liquid sidechain. (SideShift AI first suggested it might do this in January 2019 and followed suit later in the year — but we’ve been unable to find out when exactly. Edit: It was July.)



Additionally, several stablecoins found a home on Liquid, for example those issued by <a href="https://www.listedreserve.com/">Listed Reserve</a> and <a href="https://condensat.tech/">Condensat Technologies</a>. Then, in July 2019, Tether (USDT) — the industry’s biggest stablecoin by market cap — was<a href="https://tether.to/tether-add-support-for-liquid-network/?__cf_chl_jschl_tk__=f3882a15ddfc3f6ebfebeaf2d6ee59662f9bf7a2-1576082705-0-AW6_NJKlkhGEo4rw21Wo_sTe3eyUzW2osWtCukpxVDsZlBkNTNGOciuZZOkkHRbk1001jsEjqAXAM8x9sVz-nfofjOV3y7sGUZrJdm089ve9fBc2VuNKEt6hx1ZukqBPGZED9ailF8f135DCRv24QXxqy-USVzyWJhbsN41guGzmfVlQL-TCB6Yke-oQSrjxLpe6XtmQRNVZ9S2RN1N8knpvCSMOcYIYbmqClX6TjIeQlmgaM29BdDahUWCPD80yNrJL0cS1HnfSRGGVvZmiEXlvuVJWZC-eET---Lswn3MsyxmcVetpDWmgid_fEC17EQ"> deployed</a> on Blockstream’s sidechain. In itself considered the fourth-largest cryptocurrency by market cap at the time of writing, USDT is now ready to be leveraged for arbitrage between exchanges and potentially<a href="https://bitcoinmagazine.com/guides/what-are-atomic-swaps"> atomic swaps</a>, and accessible through Blockstream’s Green wallet.



"The growth of alternative assets like stablecoins and security tokens on the Liquid Network shows that sidechain technology is maturing rapidly,” Blockstream CSO Samson Mow told Bitcoin Magazine. “We hope and expect that Liquid usage will only increase in 2020.”



It seems that Liquid may indeed host more assets in the near future. Just in early December 2019, Dubai-based cryptocurrency exchange BTSE<a href="https://www.coindesk.com/btse-exchange-plans-50m-token-raise-on-blockstreams-ethereum-rival-liquid"> announced</a> a token offering hosted on Blockstream’s sidechain.



<h2>Shamir Backups for More Secure Storage</h2>



Hardware wallets are generally considered to be among the more secure solutions to store bitcoin. But even hardware wallets can break, get lost, be stolen or become otherwise unusable. This is why users are encouraged to keep a backup seed: A list of words, typically written down on a piece of paper, with which the funds on a hardware wallet can be recovered. But this introduces a new risk: If the seed is stolen, the thief could gain access to all your funds. If the seed is lost (or part of it is, for example, because it was cut in pieces and stored in different locations), it cannot be used to recover the wallet if needed.



In August 2019, SatoshiLabs introduced a solution to this problem:<a href="https://bitcoinmagazine.com/articles/hardware-wallets-just-got-a-bit-more-secure-with-trezors-shamir-backups"> Shamir Backups</a>. After more than a year of development, the company behind the Trezor hardware wallet finished a seed format based on Shamir’s Secret Sharing: A cryptographic algorithm created by well-known cryptographer Adi Shamir. It’s now possible to “split up” a wallet seed into several different seeds (“shares”), of which a predetermined subset of them is needed to recover the wallet. SatoshiLabs’ Shamir Backups allow for the creation of up to 16 shares, while individual shares can even be divided into sub-shares.



“To give one of the practical use tips — if you want your kids or loved ones to have fair access to your digital assets even after you are not here, you can split the shares evenly among them, preventing single individuals from accessing your funds,” SatoshiLabs CEO Marek “Slush” Palatinus suggested, speaking with Bitcoin Magazine. “The possibilities are now much broader, and we are happy to offer this open-source solution to any project in the industry.”



<h2>New Privacy Tools With Pay to Endpoint (P2EP)</h2>



<a href="https://bitcoinmagazine.com/articles/blockchain-analysis-about-get-harder-p2ep-enters-testing-phase">Pay to Endpoint</a> (P2EP) is a privacy technique first popularized <a href="https://blockstream.com/2018/08/08/en-improving-privacy-using-pay-to-endpoint/">through</a><a href="https://medium.com/@nopara73/pay-to-endpoint-56eb05d3cac6"> blogs</a> and<a href="https://youtu.be/0-DS7X99F7Y?t=2427"> podcasts</a> in the summer of 2018, following a privacy-focused brainstorm event attended by Bitcoin privacy researchers. (Fittingly, it remains unknown who attended the event exactly.)



In short, P2EP is a trick that would break the assumptions that much of blockchain analysis relies on, even if only a small segment of Bitcoin users would utilize it. It does this by having the recipient of a transaction partake in the transaction through a <a href="https://bitcoinmagazine.com/articles/coinjoin-combining-bitcoin-transactions-to-obfuscate-trails-and-increase-privacy-1465235087">CoinJoin</a>, to basically send funds to themselves, in addition to the actual payment. If blockchain spies assume that all coins sent in a transaction belonged to the sender — as would normally be the case — they would be wrong. Being wrong a bit too often might render this type of heuristics useless altogether.



In the final weeks of 2018, a demo version and early implementation of this privacy tool had already been<a href="https://bitcoinmagazine.com/articles/blockchain-analysis-about-get-harder-p2ep-enters-testing-phase"> introduced</a>, in the form of Bustapay and PayJoin, for JoinMarket. These versions have not been developed much further, however.



But in August 2019, the privacy-focused Samourai Wallet<a href="https://blog.samouraiwallet.com/post/187001617347/wallet-update-09985-get-in-cahoots"> released</a> its own version of P2EP, called Stowaway, under the Cahoots umbrella. Stowaway slightly differs from some other versions of P2EP, in that it only lets users make such payments to explicitely selected peers. Samourai Wallet developers believe this is a bit better for privacy, as recipients do need to reveal some of their coin ownership to the sender.&nbsp;



A related trick under Samourai Wallet’s same Cahoots umbrella, also released this year, is STONEWALLx2. With STONEWALL (without the “x2”), users could make normal payments look like CoinJoin payments even though they aren’t, simply to confuse blockchain spies. With STONEWALLx2, real CoinJoins are made, in which the coins of a selected peer are used to make the mix. This trusted peer just gets his funds returned to him. Samourai Wallet will soon also offer Cahoots as a Service, a premium spend where the Samourai team itself acts as the selected peer.



“One of our main goals is to provide the best possible on-chain transactional privacy for our users,” pseudonymous Samourai Wallet developer “Samouraidev” told Bitcoin Magazine. “The past year has been spent moving ahead with our roadmap and placing on-chain transactional privacy tools not only front-and-center, but in the palm of everyone’s hand.”



Adding to Cahoots (and its Chaumian CoinJoin implementation Whirlpool), Samourai Wallet in 2019 also introduced its “Dojo”: a dedicated backend full node server benefiting privacy (as well as security).



<h2>Miniscript Is Making Bitcoin Programming Easy(er)</h2>



Spending bitcoin, on a technical level, really means “unlocking” bitcoin, and “locking them up” again. The conditions under which coins can be “unlocked” are embedded in code, which is created in a programming language specifically designed for Bitcoin, called “Script.” Script has some complications, however, most notably that it isn’t always easy to interpret by humans, which makes it tricky to work with.



To improve on this, Blockstream's Andrew Poelstra, Pieter Wuille and Sanket Kanjalkar (an intern) designed a “stripped down” version of Script: A selection of “tools” from the “Script toolkit” that makes it easier to use and easier to verify. <a href="https://bitcoinmagazine.com/articles/miniscript-how-blockstream-engineers-are-making-bitcoin-programming-easyer">Miniscript</a>, as it's called, allows for virtually everything that Script allows, save some fringe use cases, but it is much more straightforward and predictable.



“Miniscript is, in a theoretical sense, more limiting than Script,” Blockstream director of research and Miniscript co-designer Andrew Poelstra<a href="https://bitcoinmagazine.com/articles/miniscript-how-blockstream-engineers-are-making-bitcoin-programming-easyer"> told</a> Bitcoin Magazine earlier this year. “But it can do everything that people actually use Script for.”



To make the process of writing Miniscript even easier, Wuille also designed a “policy language.” The policy language is really like a programming language of its own. After programming the conditions under which a coin can be spent in this policy language, it can be compiled into Miniscript, and, therefore, into valid Script. An added benefit of this policy language is that it automatically compiles into the best, most efficient version of Miniscript possible.



While the current version of Miniscript is not actually the final version, Blockstream is already using it internally, and Wuille is<a href="http://bitcoin.sipa.be/miniscript/"> hosting</a> a demo version of a policy language for anyone to use.



In part two of this series on what 2019 brought to Bitcoin: The Lightning Network.

Bitcoin Magazine provides news, analysis, information, commentary and price data about Bitcoin.

Bitcoin Magazine

Aaron van Wirdum is interested in decentralized consensus, FOSS, privacy in the digital age, censorship resistant payments, and more of that stereotypical Bitcoin stuff. Hodls BTC. (tip address / tippin.me / PayNym)

Aaron van Wirdum

As 2019 comes to an end, let&rsquo;s take a look at the most impactful new technologies that were released for Bitcoin this year.

2019 Bitcoin Tech in Review, What The Year Brought - Bitcoin Magazine

Bitcoin&rsquo;s technical development is progressing full steam ahead. The leading cryptocurrency&rsquo;s developer community, growing each year, is hard at work to improve the Bitcoin protocol and everything around it. Some of the bigger projects &mdash; Taproot, Stratum V2, OP_CHECKTEMPLATEVERIFY and Drivechain, to name a few examples &mdash; have made much progress throughout the year and could (in some cases optimistically) be released in 2020. Meanwhile, SegWit-usage kept increasing throughout 2019, more coins are mixed through Chaumian CoinJoin tools each month, and a growing number of wallets and services are adopting the bech32 address standard. But, as 2019 comes to an end, let&rsquo;s take a look at which new technologies have been released in the past year. Less Trust Required With Guix. Computers speak binary: they receive instructions from computer programs in &ldquo;ones and zeros.&rdquo; But humans don&rsquo;t speak binary. Programs are, therefore, written in human-readable programming languages, to then be compiled (&ldquo;translated&rdquo;) into binary code. But this means that when you download binaries, for example the latest Bitcoin Core release, you cannot check that it actually matches the open-source project hosted on Bitcoin Core&rsquo;s GitHub repository. You are trusting whoever sent you the software or whichever webpage you downloaded it from. To help subvert this problem, a number of Bitcoin Core developers compile Bitcoin Core&rsquo;s latest release into binaries as a standard part of the release process, and cross-check that their binaries match. They cryptographically sign the binaries if they match and only if they match. These signatures can, in turn, be checked by users downloading the binaries. In this way, no single developer needs to be trusted. (Of course, users can also compile the binaries themselves, if they don&rsquo;t even want to trust this group of developers.) This is harder than it sounds, however. The process of compiling binaries is usually subject to minor variables, for example, because it&rsquo;s done on different operating systems or at different speeds. This can actually result in different binaries even when compiled from the same source, making cross-checks impossible. To solve this, Bitcoin developers use a program called Gitian. Gitian is best understood as a virtual computer within a computer, in which programs can be compiled, so they always result in the exact same binaries. However, Gitian has the problem that Gitian itself was somewhat trusted: It relies heavily on Ubuntu binaries. This theoretically opens the door to sophisticated attacks on the Gitian process, potentially indirectly affecting the Bitcoin Core binaries users end up downloading. Chaincode Labs engineer Carl Dong, therefore, introduced Guix, a binary verification system that allows users to check that the Bitcoin Core client they download corresponds exactly with the code that Bitcoin Core developers wrote. In July 2019, the Bitcoin Core project merged support for Dong&rsquo;s solution, removing another layer of trust. &ldquo;Guix allows us to construct the environment in a way where we rely on a severely reduced set of trusted binaries,&rdquo; Dong told Bitcoin Magazine earlier this year. &ldquo;Most of the environment is constructed by building from a tiny binary seed, and this building process is much more auditable.&rdquo; Sidechains&rsquo; Increased Asset Offerings. 2018 was the year in which Bitcoin&rsquo;s first sidechains were launched: Blockstream&rsquo;s Liquid and RSK Labs&rsquo; RSK, both of which are (for now) secured by a federation. A group of key-holders &mdash; well-known companies in the space &mdash; lets users effectively move bitcoin from the Bitcoin blockchain to the alternative blockchain, where the coins obey different protocol rules. Now, as of 2019, Bitcoin sidechains are increasingly used for a wider range of assets. Liquid in particular is hosting a list of alternative assets, which under Liquid&rsquo;s protocol rules allows them to change hands quickly and privately. Barring some tests and playtokens, or assets that aren&rsquo;t actually used yet (like Infinite Fleet&rsquo;s INF, because the game is still to be released), SideShift AI was perhaps the first company of note to deploy its native token SAI on the Liquid sidechain. (SideShift AI first suggested it might do this in January 2019 and followed suit later in the year &mdash; but we&rsquo;ve been unable to find out when exactly. Edit: It was July.) Additionally, several stablecoins found a home on Liquid, for example those issued by Listed Reserve and Condensat Technologies. Then, in July 2019, Tether (USDT) &mdash; the industry&rsquo;s biggest stablecoin by market cap &mdash; was deployed on Blockstream&rsquo;s sidechain. In itself considered the fourth-largest cryptocurrency by market cap at the time of writing, USDT is now ready to be leveraged for arbitrage between exchanges and potentially atomic swaps, and accessible through Blockstream&rsquo;s Green wallet. &quot;The growth of alternative assets like stablecoins and security tokens on the Liquid Network shows that sidechain technology is maturing rapidly,&rdquo; Blockstream CSO Samson Mow told Bitcoin Magazine. &ldquo;We hope and expect that Liquid usage will only increase in 2020.&rdquo; It seems that Liquid may indeed host more assets in the near future. Just in early December 2019, Dubai-based cryptocurrency exchange BTSE announced a token offering hosted on Blockstream&rsquo;s sidechain. Shamir Backups for More Secure Storage. Hardware wallets are generally considered to be among the more secure solutions to store bitcoin. But even hardware wallets can break, get lost, be stolen or become otherwise unusable. This is why users are encouraged to keep a backup seed: A list of words, typically written down on a piece of paper, with which the funds on a hardware wallet can be recovered. But this introduces a new risk: If the seed is stolen, the thief could gain access to all your funds. If the seed is lost (or part of it is, for example, because it was cut in pieces and stored in different locations), it cannot be used to recover the wallet if needed. In August 2019, SatoshiLabs introduced a solution to this problem: Shamir Backups. After more than a year of development, the company behind the Trezor hardware wallet finished a seed format based on Shamir&rsquo;s Secret Sharing: A cryptographic algorithm created by well-known cryptographer Adi Shamir. It&rsquo;s now possible to &ldquo;split up&rdquo; a wallet seed into several different seeds (&ldquo;shares&rdquo;), of which a predetermined subset of them is needed to recover the wallet. SatoshiLabs&rsquo; Shamir Backups allow for the creation of up to 16 shares, while individual shares can even be divided into sub-shares. &ldquo;To give one of the practical use tips &mdash; if you want your kids or loved ones to have fair access to your digital assets even after you are not here, you can split the shares evenly among them, preventing single individuals from accessing your funds,&rdquo; SatoshiLabs CEO Marek &ldquo;Slush&rdquo; Palatinus suggested, speaking with Bitcoin Magazine. &ldquo;The possibilities are now much broader, and we are happy to offer this open-source solution to any project in the industry.&rdquo; New Privacy Tools With Pay to Endpoint (P2EP) Pay to Endpoint (P2EP) is a privacy technique first popularized through blogs and podcasts in the summer of 2018, following a privacy-focused brainstorm event attended by Bitcoin privacy researchers. (Fittingly, it remains unknown who attended the event exactly.) In short, P2EP is a trick that would break the assumptions that much of blockchain analysis relies on, even if only a small segment of Bitcoin users would utilize it. It does this by having the recipient of a transaction partake in the transaction through a CoinJoin, to basically send funds to themselves, in addition to the actual payment. If blockchain spies assume that all coins sent in a transaction belonged to the sender &mdash; as would normally be the case &mdash; they would be wrong. Being wrong a bit too often might render this type of heuristics useless altogether. In the final weeks of 2018, a demo version and early implementation of this privacy tool had already been introduced, in the form of Bustapay and PayJoin, for JoinMarket. These versions have not been developed much further, however. But in August 2019, the privacy-focused Samourai Wallet released its own version of P2EP, called Stowaway, under the Cahoots umbrella. Stowaway slightly differs from some other versions of P2EP, in that it only lets users make such payments to explicitely selected peers. Samourai Wallet developers believe this is a bit better for privacy, as recipients do need to reveal some of their coin ownership to the sender.&nbsp; A related trick under Samourai Wallet&rsquo;s same Cahoots umbrella, also released this year, is STONEWALLx2. With STONEWALL (without the &ldquo;x2&rdquo;), users could make normal payments look like CoinJoin payments even though they aren&rsquo;t, simply to confuse blockchain spies. With STONEWALLx2, real CoinJoins are made, in which the coins of a selected peer are used to make the mix. This trusted peer just gets his funds returned to him. Samourai Wallet will soon also offer Cahoots as a Service, a premium spend where the Samourai team itself acts as the selected peer. &ldquo;One of our main goals is to provide the best possible on-chain transactional privacy for our users,&rdquo; pseudonymous Samourai Wallet developer &ldquo;Samouraidev&rdquo; told Bitcoin Magazine. &ldquo;The past year has been spent moving ahead with our roadmap and placing on-chain transactional privacy tools not only front-and-center, but in the palm of everyone&rsquo;s hand.&rdquo; Adding to Cahoots (and its Chaumian CoinJoin implementation Whirlpool), Samourai Wallet in 2019 also introduced its &ldquo;Dojo&rdquo;: a dedicated backend full node server benefiting privacy (as well as security). Miniscript Is Making Bitcoin Programming Easy(er) Spending bitcoin, on a technical level, really means &ldquo;unlocking&rdquo; bitcoin, and &ldquo;locking them up&rdquo; again. The conditions under which coins can be &ldquo;unlocked&rdquo; are embedded in code, which is created in a programming language specifically designed for Bitcoin...

As 2019 comes to an end, let’s take a look at the most impactful new technologies that were released for Bitcoin this year.

Aaron van Wirdum is interested in technology and how it affects social and political structures. He has been covering Bitcoin since 2013, focusing on privacy, scalability and more. Hodls BTC.

description

max-snippet:-1, max-image-preview:large, max-video-preview:-1

https://bitcoinmagazine.com/articles/bitcoins-2019-in-tech-what-this-year-brought-us-part-1

twitter:creator

Shamir Backups, developed by Trezor’s SatoshiLabs, lets users split up their hardware wallet backup seeds.

Shamir Backups Make Hardware Wallets More Secure - Bitcoin Magazine

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/09/Project_-_Sketch_1_201.jpg

Privacy &amp; security

adi shamir

hardware wallets

satoshilabs

Trezor

backup

backup seed

backup seeds

backups

hardware

hardware wallet

keys

lost

model t

If hardware wallets have one Achilles’ heel, recovery seeds may be it. But Trezor’s <a href="https://satoshilabs.com/">SatoshiLabs</a> has figured out a solution.



Hardware wallets are generally considered to be among the most secure solutions for storing bitcoin. As the private keys to sign transactions never leave the device, these keys are never exposed to the internet and can, therefore, not be hacked remotely. Even with physical access to the device, subtracting the keys is no straightforward job — if it’s possible at all. (This appears to be an ongoing cat-and-mouse game between security researchers.)



But even if we assume that they are secure, hardware wallets can still break, get lost, get stolen or become otherwise unusable. For these cases, users should keep a backup seed: a list of a couple of dozen words typically written down on a piece of paper, from which all the device’s private keys can be generated.



But what if the backup seed itself gets lost or — worse — stolen?&nbsp;



<h2>A New Way to Split Backup Seeds</h2>



A chain is only as strong as its weakest link, and a hardware wallet is only as secure as its backup seed. If the piece of paper is stolen, the thief can claim all the coins on the hardware wallet — without any advanced technical skills. If the backup seed is lost, it is, of course, of no help when the hardware wallet is also lost, stolen or destroyed — and the coins would be inaccessible forever.



After more than a year of development, Prague-based SatoshiLabs, the company behind the Trezor hardware wallet, has now introduced Shamir Backups. Based on<a href="https://en.wikipedia.org/wiki/Shamir's_Secret_Sharing"> Shamir’s Secret Sharing</a>, a cryptographic algorithm created by well-known cryptographer Adi Shamir (the “S” in <a href="https://en.wikipedia.org/wiki/RSA_(cryptosystem)">RSA</a>, one of the first public key cryptosystems), Shamir Backups let users “split up” their backup seeds into several word lists or “shares.” The wallet’s private keys can then be recovered by combining some predetermined subset of the shares. SatoshiLabs’ Shamir Backups allow for the creation of up to 16 shares (and individual shares can be even further divided into sub-shares).



As a practical example, you could set up a two-out-of-three backup. In that case, you would generate three different word lists, and you would need any two of the three to restore your private keys. This way, you could, for example, distribute the three lists over three different locations, minimizing the risk that two of them are lost (say, in a fire) or stolen.&nbsp;



If an attacker manages to steal only one of three backup seeds, it would be of no use to them at all (as opposed to cutting a normal backup seed into multiple pieces; stealing some of these pieces could enable an attacker to guess or brute-force the remaining words). Meanwhile, if only one of the three shares is lost, the remaining two can be used to restore the wallet.



<h2>Open Standard</h2>



Shamir Backups are available for SatoshiLabs’ Trezor Model T, the company’s latest hardware wallet. Users who already have a Trezor Model T can opt to migrate to a Shamir Backup using<a href="https://wiki.trezor.io/User_manual-Moving_funds_to_a_wallet_with_a_newly_generated_seed"> this guide</a>. New users can follow the regular<a href="https://wiki.trezor.io/User_manual-Creating_a_wallet_with_Shamir_Backup"> setup guide</a>. As an open standard (<a href="https://github.com/satoshilabs/slips/blob/master/slip-0039.md">SatoshiLabs Improvement Proposal 0039</a>), other wallet providers could opt to follow in SatoshiLabs’ footsteps and offer Shamir Backups down the road as well.



For more information on Shamir Backups, also see SatoshiLabs’<a href="https://blog.trezor.io/shamir-backup-the-revolution-of-private-keys-backup-is-here-858687ed7fe7"> blog post</a> announcing the solution and its additional<a href="https://blog.trezor.io/shamir-backup-a-new-security-standard-3aa42a6ebb5f"> detailed guide</a>.



<figure class="wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
https://youtu.be/cRh-NCvHkzM
</div></figure>

Shamir Backups Make Hardware Wallets More Secure

Shamir Backups, developed by Trezor&rsquo;s SatoshiLabs, lets users split up their hardware wallet backup seeds and potentially make them more secure.

If hardware wallets have one Achilles&rsquo; heel, recovery seeds may be it. But Trezor&rsquo;s SatoshiLabs has figured out a solution. Hardware wallets are generally considered to be among the most secure solutions for storing bitcoin. As the private keys to sign transactions never leave the device, these keys are never exposed to the internet and can, therefore, not be hacked remotely. Even with physical access to the device, subtracting the keys is no straightforward job &mdash; if it&rsquo;s possible at all. (This appears to be an ongoing cat-and-mouse game between security researchers.) But even if we assume that they are secure, hardware wallets can still break, get lost, get stolen or become otherwise unusable. For these cases, users should keep a backup seed: a list of a couple of dozen words typically written down on a piece of paper, from which all the device&rsquo;s private keys can be generated. But what if the backup seed itself gets lost or &mdash; worse &mdash; stolen?&nbsp; A New Way to Split Backup Seeds. A chain is only as strong as its weakest link, and a hardware wallet is only as secure as its backup seed. If the piece of paper is stolen, the thief can claim all the coins on the hardware wallet &mdash; without any advanced technical skills. If the backup seed is lost, it is, of course, of no help when the hardware wallet is also lost, stolen or destroyed &mdash; and the coins would be inaccessible forever. After more than a year of development, Prague-based SatoshiLabs, the company behind the Trezor hardware wallet, has now introduced Shamir Backups. Based on Shamir&rsquo;s Secret Sharing, a cryptographic algorithm created by well-known cryptographer Adi Shamir (the &ldquo;S&rdquo; in RSA, one of the first public key cryptosystems), Shamir Backups let users &ldquo;split up&rdquo; their backup seeds into several word lists or &ldquo;shares.&rdquo; The wallet&rsquo;s private keys can then be recovered by combining some predetermined subset of the shares. SatoshiLabs&rsquo; Shamir Backups allow for the creation of up to 16 shares (and individual shares can be even further divided into sub-shares). As a practical example, you could set up a two-out-of-three backup. In that case, you would generate three different word lists, and you would need any two of the three to restore your private keys. This way, you could, for example, distribute the three lists over three different locations, minimizing the risk that two of them are lost (say, in a fire) or stolen.&nbsp; If an attacker manages to steal only one of three backup seeds, it would be of no use to them at all (as opposed to cutting a normal backup seed into multiple pieces; stealing some of these pieces could enable an attacker to guess or brute-force the remaining words). Meanwhile, if only one of the three shares is lost, the remaining two can be used to restore the wallet. Open Standard. Shamir Backups are available for SatoshiLabs&rsquo; Trezor Model T, the company&rsquo;s latest hardware wallet. Users who already have a Trezor Model T can opt to migrate to a Shamir Backup using this guide. New users can follow the regular setup guide. As an open standard (SatoshiLabs Improvement Proposal 0039), other wallet providers could opt to follow in SatoshiLabs&rsquo; footsteps and offer Shamir Backups down the road as well. For more information on Shamir Backups, also see SatoshiLabs&rsquo; blog post announcing the solution and its additional detailed guide. https://youtu.be/cRh-NCvHkzM

Shamir Backups, developed by Trezor’s SatoshiLabs, lets users split up their hardware wallet backup seeds and potentially make them more secure.

Tags

shamir backups

Bitcoin’s 2019 in Tech: What This Year Brought Us (Part 1)

Hardware Wallets Just Got a Bit More Secure With Trezor’s Shamir Backups