BlockchainCommons / BlockchainCommons/SmartCustodyWhitePapers

SSSS instead of seed cutting

Open
#2 13 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
81
Forks
14
PR merge metrics
No merged PRs in 30d

Description

## Context
In the chapter on [Redundant Metal Devices](https://github.com/BlockchainCommons/SmartCustodyWhitePapers/blob/master/%23SmartCustody-_Simple_Self-Custody_Cold_Storage_Scenario.md#-optional-step-use-metal-enhancement-redundant-metal-devices) you suggest to cut up the mnemonic in three parts, each containing two thirds of the mnemonic words.

## Problem with current approach
Don't roll your own crypto. Afaik, this is not best practice. The full 24 word seed has 256bit entropy, so each third of the seed has roughly 85bits.[?] If the attacker compromises two thirds of the seed from one backup, he only needs to brute force the last third with comparatively very little effort.

## Possible solution
How about a reference to Satoshilabs [SLIP-0039 : Shamir's Secret-Sharing for Mnemonic Codes](https://github.com/satoshilabs/slips/blob/master/slip-0039.md)?

Contributor guide

Open the contributing guide

Research direction

Start with the Redundant Metal Devices section in #SmartCustody-_Simple_Self-Custody_Cold_Storage_Scenario.md and read the linked SLIP-0039 specification. Review the 13-comment discussion for the intended resolution. Done means the chapter no longer presents the disputed seed-cutting approach without addressing the concern, and accurately references the agreed alternative if appropriate.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography, documentation
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.