Questions tagged [hsm]
The hsm tag has no usage guidance.
10
questions
0
votes
1
answer
42
views
What keys management setup is recommended to use with tezos-reward-distributor?
Currently for payouts I'm using a traditional tz1 addr, which is managed by the default tezos-signer binary. However, it appears to me not that safe. Some kind of HSM + KMS (say, from Google or from ...
- 15
2
votes
2
answers
274
views
Signing transaction with external hardware device and broadcasting on Babylonnet gives invalid signature
I am trying to broadcast a Tezos transaction on the Babylon testnet.
I'm using an external military-grade hardware security module (HSM) located on a remote server. Its purpose is to never expose the ...
- 145
3
votes
2
answers
343
views
Is it possible to run a baker in AWS and secure your keys with AWS CloudHSM
Ignoring the cost of running the HSM (it's likely to be prohibitively expensive for most use cases), is it theoretically possible to run your baking node fully in the cloud using a cloud provided HSM ...
- 1,349
7
votes
2
answers
296
views
Wallet using the secure enclave of the iPhone
P-256 signing curve can be used for tz3 accounts.
One of the secure enclave able to store a 256-bit elliptic curve such as P-256 is the one present in iPhones an Macs with Touch ID or Face ID.
Is ...
- 722
4
votes
1
answer
151
views
How can i setup delegation with an HSM (Ledger, Trezor)?
If I am a new user who wants to store my XTZ using a hardware wallet (like Ledger or Trezor T), what are the steps to set myself up with delegating those XTZ ?
- 6,034
8
votes
1
answer
183
views
Adding a ledger to tezos-client
In the past version of tezos-client you would run tezos-client show connected ledgers and it displayed 3 commands in order to import a new ledger. For example tezos-client import secret key XXX ledger:...
- 999
5
votes
1
answer
258
views
What are the best cold-storage methods available for XTZ?
Is using the CLI command gen keys new to generate a cryptographically secure key-pair the most secure method for cold storage eg. paper wallet? Which signature algorithm (ed25519, secp256k1, p256) ...
- 835
8
votes
2
answers
365
views
security with solo baker setup
I've seen a lot of people mention tezos setups for baking. The general idea would be to run a handful of FE nodes, likely geographically dispersed, and then having a private node which connects to ...
- 1,123
9
votes
2
answers
106
views
Can I use multiple ledgers for baking?
I'm researching setting up a highly available baking infrastructure.
Is it possible to use multiple ledgers signing for the same address?
My plan is to use a ledger connected to a laptop running a ...
- 1,973
15
votes
1
answer
239
views
Should ledger BIP-44 paths have four elements or five?
What is the correct BIP-44 path structure for the Tezos ledger apps? Should it have five path components (as Galleon uses) or four (as tezos-client and Tezbox use)?
The BIP-44 spec defines 5 levels ...
- 863