Questions tagged [hsm]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer

What keys management setup is recommended to use with tezos-reward-distributor?

Currently for payouts I'm using a traditional tz1 addr, which is managed by the default tezos-signer binary. However, it appears to me not that safe. Some kind of HSM + KMS (say, from Google or from ...
2 votes
2 answers

Signing transaction with external hardware device and broadcasting on Babylonnet gives invalid signature

I am trying to broadcast a Tezos transaction on the Babylon testnet. I'm using an external military-grade hardware security module (HSM) located on a remote server. Its purpose is to never expose the ...
3 votes
2 answers

Is it possible to run a baker in AWS and secure your keys with AWS CloudHSM

Ignoring the cost of running the HSM (it's likely to be prohibitively expensive for most use cases), is it theoretically possible to run your baking node fully in the cloud using a cloud provided HSM ...
  • 1,349
7 votes
2 answers

Wallet using the secure enclave of the iPhone

P-256 signing curve can be used for tz3 accounts. One of the secure enclave able to store a 256-bit elliptic curve such as P-256 is the one present in iPhones an Macs with Touch ID or Face ID. Is ...
4 votes
1 answer

How can i setup delegation with an HSM (Ledger, Trezor)?

If I am a new user who wants to store my XTZ using a hardware wallet (like Ledger or Trezor T), what are the steps to set myself up with delegating those XTZ ?
  • 6,034
8 votes
1 answer

Adding a ledger to tezos-client

In the past version of tezos-client you would run tezos-client show connected ledgers and it displayed 3 commands in order to import a new ledger. For example tezos-client import secret key XXX ledger:...
  • 999
5 votes
1 answer

What are the best cold-storage methods available for XTZ?

Is using the CLI command gen keys new to generate a cryptographically secure key-pair the most secure method for cold storage eg. paper wallet? Which signature algorithm (ed25519, secp256k1, p256) ...
  • 835
8 votes
2 answers

security with solo baker setup

I've seen a lot of people mention tezos setups for baking. The general idea would be to run a handful of FE nodes, likely geographically dispersed, and then having a private node which connects to ...
  • 1,123
9 votes
2 answers

Can I use multiple ledgers for baking?

I'm researching setting up a highly available baking infrastructure. Is it possible to use multiple ledgers signing for the same address? My plan is to use a ledger connected to a laptop running a ...
  • 1,973
15 votes
1 answer

Should ledger BIP-44 paths have four elements or five?

What is the correct BIP-44 path structure for the Tezos ledger apps? Should it have five path components (as Galleon uses) or four (as tezos-client and Tezbox use)? The BIP-44 spec defines 5 levels ...