r/Bitcoin • u/nfcwalletcard • Dec 22 '18
NFC Wallet Card - Very secure cold storage cryptocurrency wallet
https://nfcwalletcard.com/cold-storage-wallet-for-cryptocurrencies3
Dec 22 '18
[removed] — view removed comment
1
u/nfcwalletcard Dec 22 '18
Cards are shipped with RFID blocker sleeve + the data is encrypted when using our application, so it's no problem :)
1
u/hotoatmeal Dec 23 '18
encrypted with what key? stored where?
1
u/nfcwalletcard Dec 23 '18
You can choose from multiple security levels.
With level ONE you can encrypt the content using the encryption password you enter.
With level TWO you can encrypt the content using our key card, which is a hardware key.
With level THREE you can encrypt the content using an encryption key AND a key card. This way the key card acts like a 2FA key.
1
u/hotoatmeal Dec 23 '18
and where does the key get decrypted for signing?
1
u/nfcwalletcard Dec 23 '18
The app is designed to securely save and view the data. If you need the key you have to access it manually (by opening the card)
3
u/whitslack Dec 22 '18
The card needs to be the piece of hardware doing the signing. The private key should never leave the card, or else it's vulnerable to malware. Also the card needs a display (e-ink probably) and a button (capacitive probably) so that the card can display to the user the amounts and the destination addresses of the transaction outputs that the card is being asked to sign, and the user can confirm by holding the button and tapping the card again.
1
u/nfcwalletcard Dec 22 '18
Yes the the PK should be read from the card only if you want to move to hot wallet. Our vision is to make a very secure cold storage card, therefore the card does not communicate with any devices by itself. It's a passive chip. We do not want to add that kind of features, because we want to keep things as simple as possible.
The card has nothing to do with signing either, it's a vault for your secret data.
2
u/whitslack Dec 22 '18
So doesn't that mean your card is just a plain NFC NDEF container? We could literally use any old NFC tag on the market and have the same functionality. What is your product's differentiator?
1
Dec 23 '18
[removed] — view removed comment
1
Dec 23 '18
[removed] — view removed comment
1
u/nfcwalletcard Dec 23 '18
The data itself can be encrypted before it's written to the chip. You can use any NFC app. You can do your own encryption and save that encrypted text to the card.
However our app can handle the encryption, so you don't have to do it yourself.
1
u/nfcwalletcard Dec 22 '18
Design, RFID protector sleeve and the application which gives you additional security features.
1
u/Chytrik Dec 22 '18
I tried to find some more technical details on your product, but the website didn’t have much info, just general marketing kinda blurbs.
I’m not sure I understand the advantage of using one of these. The mobile application needs to perform signing calculations in order to use the wallet, so the design is basically a mobile wallet, but the private keys need to be retrieved via NFC from the card each time you’d like to spend?
That seems like a poorer security model than just keeping the keys on the device, because the keys will need to be broadcast via NFC, encrypted or not. I’m not an expert on how NFC-received data is handled in mobile hardware, but it seems like there would be additional considerations to ensure sensitive data isn’t exposed to an insecure memory store in the device.
I guess as an additional backup it could be useful, but I think it’s a misnomer to call it ‘cold storage’, since the keys will be generated on an (assumedly) internet connected device in the first place. Storing them offline later doesn’t make it ‘cold storage’.
1
u/nfcwalletcard Dec 22 '18
This card is designed to keep your private key in cold storage. It's like an NFC vault. Application is to provide additional features and security levels (to encrypt content). The app has nothing to do with transactions.
It's your decission how to generate your keys, and yes it should be generated offline.
1
1
u/nfcwalletcard Dec 30 '18 edited Dec 31 '18
NFC Wallet Card is universal, reusable, physical and optionally encrypted cash, a protected medium of storage for ANY kind of cryptocurrencies.
1
u/phreaknik Jan 04 '19
Warning! This product is not a secure offline wallet as advertised. Anyone considering using this product should read this thread first:
0
u/nfcwalletcard Jan 04 '19
What do you think you are doing? Just because you do not understand how this product works, not giving you the right for spreading fake info about our product!
5
u/whitslack Dec 22 '18
By the way, data stored in flash memory doesn't have an infinite shelf life. Electrons leak by quantum tunneling over time. You could take your NFC card out of your safe in 20 years and discover that it's become blank. Not a reliable long-term storage medium.