BenWestgate / yeti.Bash

A port of Yeticold.com to Shell.
https://github.com/JWWeatherman/yeticold
14 stars 2 forks source link

Ready for usage? #2

Open maltokyo opened 3 years ago

maltokyo commented 3 years ago

Great stuff, thank you for making this. Looks much simpler (in terms of self-audibility) than Yeti itself. Is it ready to use, I see there are no "releases" yet, hence the question.. Don't want to make a wallet, only to find that this is still in active development, that would be disconcerting to say the least. Otherwise, could you recommend how to think about this aspect (if one creates and uses a wallet, and afterwards there are "upgrades" to your script...). Thank you!

BenWestgate commented 3 years ago

The scripts in main branch are ready to use to create a wallet.

CreateWallet.sh and CustomWallet.sh put the wallet file on their backup CD.

So to restore later you drag that into the home/.bitcoin/ folder Offline machine for the discs labeled "SEED" Online machine for disc labeled "Watch"

Then in Bitcoin core, click File > Load Wallet > pubwallet or xprvwallet

Or you can always type your written seed words and paste descriptor into yeti's restore process. I suspect yeti will get confused if the spend threshold is not m=3 however so stick to CreateWallet.sh if full yeti compatibility is Important to you.

One advantage of restoring from wallet files is ability to sequentially sign: bring an offline laptop to each backup location, sign, transfer signed PSBT to removable media, shutdown laptop and head to next location until you reach 3 or your threshold and then transfer to an online machine to broadcast. This is safer than bringing all 3 together, sign and broadcast yeti style. This makes you vulnerable to physical attack at moment of signing and requires 2-3 extra trips to return the seeds to their locations.

I will publish Restore Scripts this week so people can avoid using Yeti to restore their wallet from paper. And give those who already made a yeti L2/L3 wallet access to this safer way to sign transactions.

LevelOne.sh is already complete for Create & Restore. It downloads blockchain over tor Creates a single sig wallet and burns 5 CDs with seed and wallet file or Restores by telling you to drag the wallet file into home/.bitcoin/ or pasting/typing your seed.

LevelTwo and LevelThree will follow shortly.

The Only "upgrade" I will make to these Level 1-3 wallets will be creating a bootable backup DVD-R where a Live OS, your wallet, CD burning software and Bitcoin Core is preloaded. This is a convenience feature since it makes the only Restore step be inserting a DVD and spamming your laptops boot menu key on start up.

Don't use anything in the dev branch except for testing and curiosity. The SecretWallet.sh works to create but funds will be locked in it until I finish SecretRestore.sh after LevelThree, probably next week.

If you wanted a Secret Wallet where any single backup alone has Zero Info about how much you're storing or your spends and also Completely Hides the fact that encryption was used . I'd wait.

If you want a Level 1-3 yeti wallet where you can feel confident about having reviewed the code, use this. Updates will only be to make it easier to use. There won't be changes to the wallet setup or security.

maltokyo commented 3 years ago

thank you very much for taking the time to lay this out, really helpful!