coldcard/ckbunker

Fork 0

[BREAKGLASS] CKBunker - A Bitcoin HSM solution to securely authorize transactions using an online Coldcard (over Tor) http://ckbunker.com

Go to file

scgbckbone ae87d17bda escape needs to be imported from markupsafe for newer jinja2 versions		2022-10-11 08:53:57 -04:00
data	Get rid of default crypto key; use random one at startup	2020-02-24 09:34:04 -05:00
docs	escape needs to be imported from markupsafe for newer jinja2 versions	2022-10-11 08:53:57 -04:00
static	lodash bumped to "4.17.21"; moment bumped to "2.29.3"; bump aiohttp-jinja2 and ckcc versions; fix import	2022-05-25 12:24:01 +02:00
templates	Little nit	2020-02-24 09:33:43 -05:00
.gitignore	make public	2020-02-14 10:42:15 -05:00
chain.py	Update licence terms	2020-12-04 08:33:46 -05:00
chrono.py	make public	2020-02-14 10:42:15 -05:00
conn.py	USB encryption V2	2022-05-11 17:53:00 +02:00
COPYING-CC	Update licence terms	2020-12-04 08:33:46 -05:00
example-settings.yaml	Rename without dash	2020-02-19 08:52:08 -05:00
LICENSE	Update licence terms	2020-12-04 08:33:46 -05:00
main.py	Update licence terms	2020-12-04 08:33:46 -05:00
make_captcha.py	make public	2020-02-14 10:42:15 -05:00
Makefile	make public	2020-02-14 10:42:15 -05:00
objstruct.py	Update licence terms	2020-12-04 08:33:46 -05:00
persist.py	USB encryption V2	2022-05-11 17:53:00 +02:00
policy.py	Get rid of default crypto key; use random one at startup	2020-02-24 09:34:04 -05:00
README.md	Link to HSM docs	2020-02-21 14:00:17 -05:00
requirements.txt	lodash bumped to "4.17.21"; moment bumped to "2.29.3"; bump aiohttp-jinja2 and ckcc versions; fix import	2022-05-25 12:24:01 +02:00
setup.py	Added install requirements and packages=[]	2022-07-19 08:34:18 -04:00
status.py	Reorg into /docs	2020-02-21 08:28:59 -05:00
torsion.py	make public	2020-02-14 10:42:15 -05:00
utils.py	Update licence terms	2020-12-04 08:33:46 -05:00
version.py	Bump to 3.9.1	2020-02-24 09:34:16 -05:00
webapp.py	escape needs to be imported from markupsafe for newer jinja2 versions	2022-10-11 08:53:57 -04:00

README.md

CKBunker

Full Documentation

What is the Coinkite Bunker?

It's a python program that you run on a computer attached to a Coldcard. It will setup and operate the Coldcard in "HSM Mode" where it signs without a human pressing the OK key. To keep your funds safe, the Coldcard implements a complex set of spending rules which cannot be changed once HSM mode is started.

Using the tord (Tor deamon) you already have, the CK Bunker can make itself available as a hidden service for remote access over Tor. A pretty website for setup and operation allows access to all HSM-related Coldcard features, including:

transaction signing, by uploading a PSBT; can broadcast signed txn using Blockstream.info (onion)
define policy rules, spending limits, velocity controls, logging policy
user setup (TOTP QR scan to enroll on Coldcard, or random passwords (Coldcard) or known password

The bunker encrypts its own settings and stores the private key for that inside Coldcard's storage locker (which is kept inside the secure element of the Coldcard). The private key for the onion service, for example, is protected by that key.

What is Coldcard?

Coldcard is a Cheap, Ultra-secure & Opensource Hardware Wallet for Bitcoin. Get yours at ColdcardWallet.com

Learn more about the Coldcard HSM-related features.

Follow @COLDCARDwallet on Twitter to keep up with the latest updates and security alerts.

FAQ

Will HSM mode be supported on Mk1 or Mk2?

Sorry no. CK Bunker only works on Mk3 because we need the extra RAM and the newer features of the 608 secure element.

What is HSM?

"Hardware Security Module"

Learn more about the Coldcard in HSM Mode

Quotes

"Basically the cost of a Bitcoin HSM with custom policies is now the cost of a coldcard and you don't need a thirty party to maintain it." - Francis P.