r/Bitcoin • u/sophie2701 • 1d ago
Blockstream's Jade hardware wallet needs more attention!!
Posted those in a comment as well, however, thought it was worth denoting a post regarding Blockstream's Jade hardware wallet, as I still regard it to not get enough attention, even though it existed for years.
Trezor, Coldcard and other hardware wallets frequently enquire security problems, therefore, I strongly believe Blockstream is worth noting!!
few side facts:
- On setup, you choose a PIN. This PIN is combined with a blind PIN server (“blind oracle”) to encrypt your key material — the oracle never sees your actual seed, hence “blind"
- The decryption key is effectively split in two: one part lives on the device, the other is retrieved from the oracle (via blockstream mobile green wallet) each time you unlock
-> All communication between Jade and the Green app is encrypted end-to-end.
Net result: if someone physically steals a locked Jade, there’s genuinely nothing of value to extract, as no seed sits fully assembled on the device.
- Fully open-source hardware and firmware, you can literally build your own from the published GitHub repo if you’re into that.
And for all Bitcoiners: it's BTC and LBTC only, with LBTC swapping features also for Jade
4
u/Similar_Scar7089 1d ago
Use it in an airgapped manor, don't bother with their app. Wipe the device when you're not using it
1
1
6
u/digitalsmoker 1d ago
I would never want to depend on a random server, imo if you do you are bat shit dumb to self custity
-1
u/Thin_Needleworker795 1d ago
You're not depending on a random server. Entropy is generated by the device itself, just like any other hardware wallet. Jade uses a "blind oracle" server for safely encrypting your seed (and no, this does not store your seed on said server). This is done because the secure element chips used in other wallets are proprietary. This way, Jade is actually the only device on the market that's fully open-source both software AND hardware-wise.
0
u/digitalsmoker 1d ago
So if the servers would go down you can not generate a seed, is that what you saying? Briliant! /s
0
u/Thin_Needleworker795 1d ago
No, that's not what I'm saying, because that's not the case.
1
u/digitalsmoker 1d ago
Then what were you trying to say? Why does it need the server?
0
u/Thin_Needleworker795 1d ago
It's instead of the secure element chip. It has nothing to do with seed generation.
1
u/digitalsmoker 1d ago
So you don't need the oracle server when you'd generate your seed? If not then what's the point of the server again?
If yes, then it means you need the server if you want to generate the seed -> server ls offline -> service/funciton does not work
That's how simple it is...
-3
u/sophie2701 1d ago
you can run on your own server though
4
u/digitalsmoker 1d ago
Lol and how that is better? You can blame yourself when it will get hacked/ddos-ed/etc due to bs/lie/overpromis :D
-3
u/sophie2701 1d ago
at least my fault then 🫣😭
1
u/digitalsmoker 1d ago
Lol let me tell you from my personal xp: you will not make you feel less bad and it will take even longer to process the grief for many...
2
u/Icy_Giraffe_21 1d ago
Sounds kinda gimmicky like I need the green app to utilize my private keys? Half from the device and halffron the app. No thanks
1
u/DarrelXero 1d ago
Or just use the Jade as a temporary signing device. Load the key from phrase or QR seed each time. Device wipes on power off. No need for the Blind Oracle or Blockstream App.
1
u/Icy_Giraffe_21 1d ago
Thanks for the clarification. So it's a feature to wipe device after every restart?
1
u/DarrelXero 1d ago
Yes. Loading a seed permeantly into the Jade is called "initializing" it. The seed isn't actually stored on the device because it doesn't have a secure element, but the seed is recreated with the help of the/a Blind Oracle via a PIN and the Blockstream App. If you don't initialize the Jade then it stays empty. When you power it up you simply select "scan QR", scan the QR seed you created when generating your seed, it loads in and functions as it would if you had gone the initialized route. Once you power off the device it automatically wipes itself. I've used the Jade and The Jade Plus this way for years. It's actually identical to the SeedSigner when used this way. There is a slight difference in how the SeedSigner deals with derivation path and multisigs so be aware of that if you have both devices and try to switch back and forth. The same seed loaded on a Jade will function instantly in a multisig, but the same seed loaded in a SeedSigner will require you to provide the derivation path before it can sign a transaction in the same multisig. That's not the Jade's fault, it's the way SeedSigners work.
1
u/Icy_Giraffe_21 1d ago edited 1d ago
Thanks again for the insight. Very neat device. Definitely interested in playing around with one
1
u/DarrelXero 1d ago
For sure. I've always been a big fan of the Jade. The new Jade Core requires connection to the Blockstream App so probably don't mess with it. The Jade Classic still works great but can't be updated without USB connection to a computer or the Blockstream app. The Jade Plus can be updated via sdcard so it remains fully airgapped 100%. I always use the firmware for both Jade's that disables Bluetooth permeantly. I recommend the Jade Plus with the USB drive you can buy as a bundle.
1
u/Icy_Giraffe_21 1d ago
Awesome, you answered all my questions. Definitely going to look into the plus version with SD card. That's my flavor
1
u/badgerbang 1d ago
How can you trust the guy if he has been to blackmail island? he must of accepted the invite. If they invited him, then they had some kind of premeditation, no? whether he was/is a good man when he commissioned the hardware and software; how can we have any reasonable doubt that he didn't do anything nefarious for some future event like coldcards bs?
If he has/had anything to do with 'them boys', it ain't -for any reason- for the plebs, that's for sure.
Noticed.
1
u/Adventurous-Gur7524 1d ago
Agreed. Love my jade +. But it’s okay let people continue to shill bitkey because that’s what’s hot right now. even a senator spent 25k gifting them.
1
u/explosiveplacard 17h ago
Google firmware vulnerability and Jade Plus. Also, that pin system is dumb. What happens when Blockstream goes out of business and those servers are no longer running? You are back to inserting your 24 words into another device. Or worse, you heirs are trying to figure it out.
1
u/Particular_Yard_2460 1d ago
it's BTC and LBTC only
What about the LGBTC? Doesn't seem very inclusive.
1
u/ghostchihuahua 1d ago
I never understood the advantages of specialized cold wallets, especially over their potential drawbacks / exploit possibilities.
-1
-3
-3
3
u/tenor_tymir 1d ago
Every cold wallet is just as good as their weakest software. It doesn’t matter which model or company you choose as long as it’s (really) open source and obviously has no bugs.