Source
r/Bitcoin•
murzika

Ledger Trustlet (a Bitcoin hardware wallet you can download) available in beta

Ledger Trustlet (TEE) - Beta 1

Ledger introduces a virtualized Hardware Wallet solution that lets you secure your Bitcoin transactions without additional hardware, relying on the Trusted Execution Environment installed into your smartphone.

Join our Ledger Trustlet beta here https://www.ledgerwallet.com/beta/trustlet

Support thread: http://www.reddit.com//r/ledgerwallet/comments/3ibc50/ledger_wallet_for_tee_open_beta/

Posted Aug 25, 2015, 10:30 AM UTC

5141
BitFast•

If anyone has any question or suggestion about GreenBits fire away!

We think the Trustlet from Ledger is a great way to improve the security of the wallet while being more userfriendly than hooking up USB devices to a mobile!

Good work Ledger!

10
IIIIIHIIIII•

Is Greenbits = Greenaddress?

3
BitFast•

GreenBits is the second wallet GreenAddress has pushed to the play store and f-droid: biggest difference is that the first one was a Cordova non native app, this one is an Android native app and it is also easier to use.

6
amity•

As someone who absolutely loves his Ledger nano, I can say Ledger is definitely a company worth your time.

The Ledger nano is a great product and just as secure as a Trezor - as long as you trust the computer you set it up on, and use the mobile app for 2FA. Their new firmware will also enable you to set up the Ledger on a compromised computer (it's a little complicated understanding how this works, but it sounds great), so if you're wary of buying one now, you should definitely get one when that comes out.

9
btc5000•

Love it

8
squarepush3r•

so hot

3
GibbsSamplePlatter•

Tech fapping

4
BIGbtc_Integration•

Well done!

4
wserd•

Getting the following error on my Galaxy S6 when I attempt to launch it:

http://imgur.com/R9MpOVK

3
btchip•

Samsung is deploying a system update to include our certificate. I hope it'll be completed in all regions this week. When installed, you should be running on OS 5.1.1 with SE for Android version ending with _0032.

7
wserd•

Sounds good. FWIW my phone is an unlocked Italian model.

It is currently on 5.1.1 but the SE version ends in _0017

1
btchip•

the new update should push it to _0032. It'll also keep the same version, with a different build ID.

4
cypherdoc2•

do you know if Samsung is now bypassing the phone wireless carriers like Verizon for their updates? i thought they had to be coordinated which causes delays?

1
CrazyCodeLady•

I really like this idea and I appreciate you making my bitcoins easier to secure, but my neckbeard is wary. If you are unwilling to opensource the entire project it makes me very unmotivated to assist in you're beta program. If it were open source I could maybe help port it to my phone or poke around and make your app more secure. I also feel like you could make more money because it could be a better product if you open sourced it. Thanks, but no thanks until you make it open.

Edit: The team says that they will open source everything that they can, legally speaking.

2
btchip•

If you are unwilling to opensource the entire project it makes me very unmotivated to assist in you're beta program

that's unfortunate, but we'll never be able to open everything on that specific technology, and of course it's not up to us to decide or we'd be opening everything. We plan to open significantly more parts in the near future, but at some point there's a choice to be made, and I think it'd be a waste to refrain from using interesting technologies easily available on recent phones.

If it were open source I could maybe help port it to my phone or poke around and make your app more secure

you can still poke around and look for bugs with the current application - everything is documented.

2
CrazyCodeLady•

Why is it not up to you to open source.

5
btchip•

Because we use multiple proprietary solutions - the Secure Boot Exynos implementation is not Open Source, Trustonic implementation of the Trusted Execution Environment is not Open Source, and Intercede implementation of the Trustonic proprietary provisioning method is not Open Source either.

We're still trying hard to work around this to provide code that third parties will be able to audit and tweak without NDAs, but that will not include everything - it'll be very similar to our Java Card implementation, on which you can audit and tweak the application, but not the Virtual Machine executing it.

4
CrazyCodeLady•

That's really unfortunate. Well in that case I'll keep an eye out. I can't participate in the beta because I have a oneplus one, but thank you for being understanding and answering all my questions in a professional manor. Good luck guys!

3
theonetruesexmachine•

Repeat after me r/Bitcoin:

There is no such thing as secure and public proprietary software. If you cannot read the code that's running on your machine, the software is effectively compromised. It could contain any number of backdoors that would be undetectable in practice. Do not trust large amounts of coins with such an implementation. Use a wallet that has both open software and hardware, and is thus fully auditable.

Any wallet claiming to be secure on a closed platform is effectively compromised. Any team claiming a wallet on a closed platform is secure is either incompetent or effectively compromised.

-5
skang404•

Maybe I am not understanding it, so someone can help me out please.

They are basically a wallet but kind of a meta-wallet that attaches itself to other wallets, takes over the coins in transmission and then hands them back to the primary wallet at the other end.

How are they more secure?

2
btchip•

The meta-wallet executes in a dedicated mini Operating System which is isolated from Android and cannot be easily attacked or observed by malware - so in the end, it's very similar to having an external Hardware Wallet. You can get more information about this technology on GlobalPlatform website.

8
[deleted]•

[deleted]

1
btchip•

Actually no, and this architecture was precisely designed to avoid those attacks (when properly implemented)

2
-Hegemon-•

Sorry, I deleted my comment because I was stating a fact without knowing anything.

I recall now, I've heard an interview I think one of you guys gave at a podcast and there is isolation, being on a different chip.

So I'd trust this as much as I'd trust a hardware wallet. That means I'd trust a decent amount of money, but if I had (which I don't) $300.000, it's cold wallet.

3
ItsAboutSharing•

Looks great, but why not open source it? That is the stumbling block. I guess if you are public figures and all there is less chance of "theft" or compromise, but the threat of a back door (not even by the creators), seems to be problematic.

1
btchip•

I've answered that point and explained our plans above - check out that thread https://www.reddit.com/r/Bitcoin/comments/3ibfrj/ledger_trustlet_a_bitcoin_hardware_wallet_you_can/cuf1aaz

3
holytransaction•

TEE is truly awesome.

1
usukan001•

seriously - you think people would use this?

Demo vids are atrocious.

Trezor is the best solution - you have lost the plot

-7
murzikaOP•

I agree that quality of the video is not the best, but this is not intented for marketing purpose. We are targeting enthousiasts for a beta program.

Trezor comparison if off topic: the Ledger Trustlet is not a hardware wallet but a software solution running in a secure enclave of an Android phone. For instance, if you are using Mycelium you can have the private key management handled by the Trustlet (in the secure TEE) and achieve the same level of security than having a HW without the hassle of having to keep it with you all the time.

10
AgnosticAndroid•

I personally love the TEE integration, have been hoping for something like this for quite a while already.

I am currently testing the beta on my GS6 and so far I'm loving it. Integration with Mycelium is already great in this first public beta and the added security layer it provides over other mobile standalone apps is awesome.

5
_Mr_E•

Are there any phones today that support this? Is it susceptible to come kind of MIM given there is no second screen?

3
btchip•

All Galaxy S6, S6 Edge, S6 Edge +, Note 5.

A few Note 4 models (Exynos based) - more details on our beta page

MITM is supposed to be avoided by a hardware isolation of the screen buffer when the TEE is drawing on it - of course beta testers are welcome to try to break that.

3
_Mr_E•

Neat! If someone gains physical access to your device how easy is it for them to pull all your keys?

2