BlockchainCommons / BlockchainCommons/SmartCustodyWhitePapers
SSSS instead of seed cutting
- Dominant language
- No language data
- Stars
- 81
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
## Context
In the chapter on [Redundant Metal Devices](https://github.com/BlockchainCommons/SmartCustodyWhitePapers/blob/master/%23SmartCustody-_Simple_Self-Custody_Cold_Storage_Scenario.md#-optional-step-use-metal-enhancement-redundant-metal-devices) you suggest to cut up the mnemonic in three parts, each containing two thirds of the mnemonic words.
## Problem with current approach
Don't roll your own crypto. Afaik, this is not best practice. The full 24 word seed has 256bit entropy, so each third of the seed has roughly 85bits.[?] If the attacker compromises two thirds of the seed from one backup, he only needs to brute force the last third with comparatively very little effort.
## Possible solution
How about a reference to Satoshilabs [SLIP-0039 : Shamir's Secret-Sharing for Mnemonic Codes](https://github.com/satoshilabs/slips/blob/master/slip-0039.md)?
Contributor guide
Research direction
Start with the Redundant Metal Devices section in #SmartCustody-_Simple_Self-Custody_Cold_Storage_Scenario.md and read the linked SLIP-0039 specification. Review the 13-comment discussion for the intended resolution. Done means the chapter no longer presents the disputed seed-cutting approach without addressing the concern, and accurately references the agreed alternative if appropriate.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography, documentation
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100