12
votes
Should ledger BIP-44 paths have four elements or five?
The Ledger app itself supports any length from 2 components up to 10, as long as the derivation path starts with 44'/1729'. This allows the Ledger to support either convention, and this support will ...
- 221
10
votes
Can I use multiple ledgers for baking?
It is possible to have a hot-standby signer albeit I would recommend against it.
In order to have a hot-standby, you initialise a second ledger with the same seed as the first one. Then you need a ...
- 1,009
9
votes
Accepted
Wallet using the secure enclave of the iPhone
There isn't currently a wallet for iOS using the secure enclave. But the tz3 accounts use p-256 encryption and were put in primarily to support iOS, Android, and other devices which are only ...
- 1,999
8
votes
Accepted
Adding a ledger to tezos-client
The difference is in the default derivation path suggested by the cli. If you use /0'/0' in both (or nothing in both) you should get the same keys.
The words are derived based on the hash of the root ...
- 4,599
6
votes
Accepted
security with solo baker setup
The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication.
This is ...
- 1,096
5
votes
Accepted
What are the best cold-storage methods available for XTZ?
Hardware wallets like the Ledger Nano are good cold storage solutions.
Offline-wallet creation in an air-gap device is also a good solution.
Kukai wallet offers you the possibility to do offline-...
- 146
3
votes
Accepted
How can i setup delegation with an HSM (Ledger, Trezor)?
First of all, when storing tezos using an HSM one still needs to connect to a node in order to perform operations like transactions or delegation. For this there is the choice between connecting to a ...
- 6,054
3
votes
security with solo baker setup
The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication.
I would ...
- 1,009
2
votes
Accepted
Signing transaction with external hardware device and broadcasting on Babylonnet gives invalid signature
I ran your code, and found out that your payload hash is not correct; these lines of code:
const payload: string = bufferToHexString(Buffer.from(bb));
await sodium.ready;
const payloadHash = ...
- 61
2
votes
Signing transaction with external hardware device and broadcasting on Babylonnet gives invalid signature
Util Link: base58.ml
The pre-apply RPC call validates the signature prefix, while the inject operation call doesn't.
You should use the specific curve prefix.
sig([4, 130, 43]) # sig(96) generic ...
- 3,923
2
votes
Accepted
Is it possible to run a baker in AWS and secure your keys with AWS CloudHSM
Yes, I believe this is how the foundation bakers currently work - here's a link to a public github repo with relevant code: https://github.com/tacoinfra/remote-signer
- 3,351
2
votes
Wallet using the secure enclave of the iPhone
Taylor Keefer demonstrated a prototype iOS app on May 6, 2019 in a Medium article "Signing Tezos Transactions with iOS’s Secure Enclave and Face ID". As in the solution described by @cousinit, this ...
- 722
2
votes
Can I use multiple ledgers for baking?
The main risk with using multiple ledger/bakers is the risk of double-baking/double-endorsing which will make you lose your bond.
So technically the answer to your question is "yes" however to be ...
- 6,054
Only top scored, non community-wiki answers of a minimum length are eligible