AirGap Feature — Dice Roll and Coin Flip
574 بار بازدید -
2 سال پیش
-
Coin Flip and Dice Roll
Coin Flip and Dice Roll Entropy Collection
The sequence most wallets use to generate your secret recovery phrase is to collect entropy from your device's random number generator (RNG), then turn this entropy into secret recovery phrases, often represented as 12 or 24 words.
This procedure appears uncomplicated, but there is an underlying security concern here. The problem is that it is not verifiable how most RNG chips work. There is no way to tell whether the output of those chips is truly random or if it outputs a predefined sequence that appears random, but can be reconstructed by the device manufacturer.
We've been aware of this issue with random number generators since the first release of AirGap. As a result, before creating a secret, we collect additional entropy from the camera, microphone, accelerometer and touch input to decrease the attack vector from a compromised RNG. The resulting secret recovery phrase will include both the RNG output and the inputs from the users. If someone wants to compromise and recalculate the secret, he must know both inputs, therefore a compromised RNG is no longer sufficient to steal your secret recovery phrase in AirGap.
To take security further and eliminate any flaws from the RNG, we introduced the dice roll and coin flip feature. Instead of relying on the device to give you random numbers to generate the secret recovery phrase, the users have to provide those random numbers themselves using either dice or a coins.
Further information:
https://support.airgap.it/airgap-vaul...
www.airgap.it DOWNLOAD AIRGAP NOW:
AirGap Wallet
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-w...
AirGap Vault
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-v...
https://airgap.it/
Twitter: AirGap_it
Discord: discord DOWNLOAD AIRGAP NOW:
AirGap Wallet
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-w...
AirGap Vault
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-v...
https://airgap.it/
Twitter: AirGap_it
Discord: discord
The sequence most wallets use to generate your secret recovery phrase is to collect entropy from your device's random number generator (RNG), then turn this entropy into secret recovery phrases, often represented as 12 or 24 words.
This procedure appears uncomplicated, but there is an underlying security concern here. The problem is that it is not verifiable how most RNG chips work. There is no way to tell whether the output of those chips is truly random or if it outputs a predefined sequence that appears random, but can be reconstructed by the device manufacturer.
We've been aware of this issue with random number generators since the first release of AirGap. As a result, before creating a secret, we collect additional entropy from the camera, microphone, accelerometer and touch input to decrease the attack vector from a compromised RNG. The resulting secret recovery phrase will include both the RNG output and the inputs from the users. If someone wants to compromise and recalculate the secret, he must know both inputs, therefore a compromised RNG is no longer sufficient to steal your secret recovery phrase in AirGap.
To take security further and eliminate any flaws from the RNG, we introduced the dice roll and coin flip feature. Instead of relying on the device to give you random numbers to generate the secret recovery phrase, the users have to provide those random numbers themselves using either dice or a coins.
Further information:
https://support.airgap.it/airgap-vaul...
www.airgap.it DOWNLOAD AIRGAP NOW:
AirGap Wallet
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-w...
AirGap Vault
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-v...
https://airgap.it/
Twitter: AirGap_it
Discord: discord DOWNLOAD AIRGAP NOW:
AirGap Wallet
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-w...
AirGap Vault
📱 iOS — App Store: https://itunes.apple.com/us/app/airga...
📱 Android — Google Play: https://play.google.com/store/apps/de...
📱 Android – GitHub APK: https://github.com/airgap-it/airgap-v...
https://airgap.it/
Twitter: AirGap_it
Discord: discord
2 سال پیش
در تاریخ 1401/06/29 منتشر شده
است.
574
بـار بازدید شده