Beveiligingsonderzoek

Can Your Phone Replace a Hardware Wallet?

Main Takeaway: A phone can store keys in secure hardware, but it also runs many apps and stays online, so the device that holds your keys is also the one that decides what gets signed. A hardware wallet moves the keys to a device that only signs. Use the phone for the App and the network. Term What it means here Secure enclave A protected area in a phone chip that stores keys and signs without exposing them. Signing device A device whose only job is to hold private keys and sign transactions. Attack surface Every route by which software or a person could reach your keys. Clipboard hijacking Malware that swaps an address you copied for the attacker's address. Can a phone replace a hardware wallet? A phone can store keys well, yet it cannot do the one job a hardware wallet does, which is keeping keys on a device with no other work to do. Modern phones have...