Hot answers tagged

12 votes

Should ledger BIP-44 paths have four elements or five?

The Ledger app itself supports any length from 2 components up to 10, as long as the derivation path starts with 44'/1729'. This allows the Ledger to support either convention, and this support will ...
user avatar
10 votes

Can I use multiple ledgers for baking?

It is possible to have a hot-standby signer albeit I would recommend against it. In order to have a hot-standby, you initialise a second ledger with the same seed as the first one. Then you need a ...
user avatar
  • 989
9 votes
Accepted

Wallet using the secure enclave of the iPhone

There isn't currently a wallet for iOS using the secure enclave. But the tz3 accounts use p-256 encryption and were put in primarily to support iOS, Android, and other devices which are only ...
user avatar
  • 1,969
7 votes
Accepted

Adding a ledger to tezos-client

The difference is in the default derivation path suggested by the cli. If you use /0'/0' in both (or nothing in both) you should get the same keys. The words are derived based on the hash of the root ...
user avatar
  • 4,399
6 votes
Accepted

security with solo baker setup

The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication. This is ...
user avatar
5 votes
Accepted

What are the best cold-storage methods available for XTZ?

Hardware wallets like the Ledger Nano are good cold storage solutions. Offline-wallet creation in an air-gap device is also a good solution. Kukai wallet offers you the possibility to do offline-...
user avatar
  • 146
3 votes
Accepted

How can i setup delegation with an HSM (Ledger, Trezor)?

First of all, when storing tezos using an HSM one still needs to connect to a node in order to perform operations like transactions or delegation. For this there is the choice between connecting to a ...
user avatar
  • 6,006
3 votes

security with solo baker setup

The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication. I would ...
user avatar
  • 989
2 votes
Accepted

Signing transaction with external hardware device and broadcasting on Babylonnet gives invalid signature

I ran your code, and found out that your payload hash is not correct; these lines of code: const payload: string = bufferToHexString(Buffer.from(bb)); await sodium.ready; const payloadHash = ...
user avatar
  • 61
2 votes

Signing transaction with external hardware device and broadcasting on Babylonnet gives invalid signature

Util Link: base58.ml The pre-apply RPC call validates the signature prefix, while the inject operation call doesn't. You should use the specific curve prefix. sig([4, 130, 43]) # sig(96) generic ...
user avatar
2 votes
Accepted

Is it possible to run a baker in AWS and secure your keys with AWS CloudHSM

Yes, I believe this is how the foundation bakers currently work - here's a link to a public github repo with relevant code: https://github.com/tacoinfra/remote-signer
user avatar
2 votes

Wallet using the secure enclave of the iPhone

Taylor Keefer demonstrated a prototype iOS app on May 6, 2019 in a Medium article "Signing Tezos Transactions with iOS’s Secure Enclave and Face ID". As in the solution described by @cousinit, this ...
user avatar
2 votes

Can I use multiple ledgers for baking?

The main risk with using multiple ledger/bakers is the risk of double-baking/double-endorsing which will make you lose your bond. So technically the answer to your question is "yes" however to be ...
user avatar
  • 6,006

Only top scored, non community-wiki answers of a minimum length are eligible