Damus
Open in Damus

Recent Notes

Deleted Account · 103w
For sure man the game was in a better space when Yellow Album dropped
Deleted Account · 103w
What you know about that classic
N · 103w
Setup up your zaps sir
Matt Corallo · 154w
Okay? Add an extension to the PSBT with requested nonce. This is really trivial stuff.
Matt Corallo · 154w
Hmm? No, the average user uses a hardware wallet and corresponding software control wallet which implements such a protocol completely transparently to them.
Matt Corallo · 154w
In general don’t use a device dedicated to storing bitcoin to store bitcoin. Any hardware wallet that isn’t (a) exclusively multisig or (b) is designed to not be able to leak your keys via nonce (...
 Seardsalmon profile picture
Seardsalmon @Seardsalmon
Seems oddly bait and switch given RFC6979 advises to use deterministic nonce (which secp256k1 has ecdsa support for and Coldcard Mk4 uses?) while folks are trying to redo nonce impl’s for Schnorr signing because DN

https://github.com/randombit/botan/issues/2939

https://github.com/BlockstreamResearch/secp256k1-zkp/issues/172

https://github.com/bitcoin-core/secp256k1/pull/1140

Btw can also do deterministic build of Coldcard firmware and flash
1
Matt Corallo · 154w
Problem is you have a device that you cannot realistically audit the supply chain of, and which is at incredibly high risk of supply chain attacks. Deterministic nonces are great but they’re not auditable - there’s high risk of the machine telling you its doing a deterministic nonce when it is i...