Got it, and good to know it already runs on Linux too. With an ordinary USB stick, here's what I'd aim for:
- Store the key only encrypted on the stick (NIP-49 ncryptsec, scrypt-based), unlocked with...
Thanks for the suggestions. My idea is a little different from simply running a portable SkySigner binary from a USB drive. I am building a bootable SkySigner USB OS so the computer starts in a separate environment instead of using the host operating system.
SkySigner already supports NIP-07 and NIP-46. I want to keep both options available in the USB version rather than limiting it to local signing.
The goal is to keep the encrypted vault on the USB drive and require a password for signing permissions. I am also working on what happens when the USB drive is removed. The signer should stop and sensitive information should not remain accessible in RAM.
I have already managed to boot the system but I am still dealing with some startup problems. So right now I am trying to get the basic USB OS working properly before moving on to more security tests.
I know an ordinary USB drive cannot offer the same protection as a dedicated hardware signer. But I want to see how far I can take SkySigner with hardware people already have at home.
SkySigner already supports NIP-07 and NIP-46. I want to keep both options available in the USB version rather than limiting it to local signing.
The goal is to keep the encrypted vault on the USB drive and require a password for signing permissions. I am also working on what happens when the USB drive is removed. The signer should stop and sensitive information should not remain accessible in RAM.
I have already managed to boot the system but I am still dealing with some startup problems. So right now I am trying to get the basic USB OS working properly before moving on to more security tests.
I know an ordinary USB drive cannot offer the same protection as a dedicated hardware signer. But I want to see how far I can take SkySigner with hardware people already have at home.
1