Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for a passphrase? #381

Closed
Midar opened this issue Mar 6, 2022 · 3 comments
Closed

Support for a passphrase? #381

Midar opened this issue Mar 6, 2022 · 3 comments

Comments

@Midar
Copy link

Midar commented Mar 6, 2022

Given that the Trezor hardware is vulnerable to voltage glitching which allows easy recovery of the secrets, is there a way to add a passphrase to GPG keys, similar to https://wiki.trezor.io/Passphrase?

@Midar
Copy link
Author

Midar commented Mar 6, 2022

???

I'm talking about this: https://blog.kraken.com/post/3662/kraken-identifies-critical-flaw-in-trezor-hardware-wallets/

Trezor's official statement was that it's not too bad because you can use a passphrase to protect your wallet. However, you'd also need a passphrase then to protect your GPG keys, otherwise the same attack would work against GPG keys on a Trezor.

@Midar
Copy link
Author

Midar commented Mar 6, 2022

??

What do you mean by "synchronize your wallet"? What is that even supposed to mean in the context of GnuPG?!

And what should I debug here - how do you "debug" the absence of a feature?!

@romanz
Copy link
Owner

romanz commented Jan 6, 2023

If a passphrase usage is enabled, it will be used to derive the GPG secret key.

@romanz romanz closed this as completed Jan 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants
@romanz @Midar and others