What is the Coinkite Coldcard? It's a Bitcoin hardware wallet, so it signs transactions and can be used offline. BIP39 based, which means you can backup the secret words onto paper, and have lots of sub-accounts and unlimited independent payment addresses. It knows how to understand transactions, so...
## Summary of the ColdCard Encrypted SD Backup Podcast Episode
This podcast segment dives deep into the design and functionality of the ColdCard hardware wallet's encrypted SD card backup feature. The ColdCard allows users to create a secure backup of their wallet data, including private keys, extended private keys, fingerprints, and public keys, onto a standard SD card. This backup is created as a 7-Zip archive using AES 256-bit encryption in CBC mode, secured with a 56-bit key derived from a 12-word passphrase generated by the ColdCard's true random number generator. The process is designed to be straightforward, requiring only the passphrase to restore the backup to a new ColdCard. While the system offers robust security, it's not without limitations – archive file names are unencrypted, the device PIN code isn't included, and tampering with the backup file will render it unusable.
The podcast also highlighted the practical implications of this backup system. The `coldcard_backup.txt` file contains crucial information like the dynamic, extended private key, and raw secret, allowing users to potentially access their funds using alternative wallets. The hosts demonstrated how to view and extract the contents of the backup file, emphasizing the importance of immediate action (sweeping funds) after decryption to mitigate potential security risks if performed on a connected computer. A future video will demonstrate the backup verification process directly on the ColdCard device. Overall, the podcast underscored the usability and security of the ColdCard's backup system, emphasizing the importance of utilizing established cryptographic practices and avoiding "rolling your own crypto."
1. Main Topics Discussed:
- ColdCard Backup Feature: Detailed explanation of the SD card backup process and its purpose.
- Encryption Method: Breakdown of the AES 256-bit encryption using a 56-bit key derived from a 12-word passphrase, and the use of 7-Zip.
- Passphrase Generation: How the ColdCard generates the 12-word passphrase using its true random number generator.
- Backup Contents: What data is included in the backup file (private keys, extended private keys, fingerprints, public keys, firmware version, dynamic, raw secret).
- Restoration Process: How to restore the backup to a new ColdCard.
- Security Considerations: Discussion of the security measures in place and potential vulnerabilities.
- Limitations: Acknowledging the limitations of the backup system (unencrypted filenames, no PIN code, file integrity).
- Alternative Wallet Access: The possibility of accessing funds using the extended private key or dynamic in another wallet.
- Verification Demonstration: Live demonstration of viewing and extracting the contents of the backup file.
2. Key Quotes:
- "Don't roll your own crypto...use strong cryptography."
- "We know that we have to 128 bit of entropy in the passphrase itself."
- "The device pin code is not preserved during the backup."
- "It shows the dynamic right here, it shows the extended private key right here, it shows the raw secret..."
3. People Mentioned:
- Peter Gray (contributor to ColdCard documentation)
- Clark Movie (contributor to ColdCard documentation)
- Pierce (podcast host's co-host)
4. Bitcoin Price:
- No Bitcoin prices were mentioned in this segment. However, the host mentioned the cost to book a Q&A session via a "hotline" was 1.5 million sats.