This document discusses hardware wallet security and building a protected bitcoin wallet. It outlines several key components: 1. Hardware wallets isolate private keys in secure elements to prevent export or exposure. They use certified random number generation and software tamper proofing. 2. Secure displays assure screen displays correct data and prevent malware from screen scraping. They are isolated from the operating system. 3. Secure input prevents private key logging or software stealing PINs. User intent is collected in an isolated manner. 4. Protected processes use isolated execution and secure PIN comparison to sign bitcoin transactions without exposing private keys.

1. Building the Hardware
Protected Wallet
Security all wallets can use

2. Cold Storage
Bitcoin Customer Experience
Better UI
Insurance
Multi SIG
SMARTCARDS
Training Don’t forget
your KEY
Hot
Wallet
1aCf35Df3Cd1482DaA444bbFff
Backup keys

3. Secure
Display
Protect
Private Key
Secure
Device Sync
Secure Input
USER
Technology protecting users

4. Protect the private keys
• Keys are isolated in hardware
• Private Key can not be
exported
• Certified hardware random
number
• Software Tamper Proof
• Pin match in hardware
• Secure element support

5. Secure Display
Account displayed
Amount displayed
Confirmation request displayed
• Isolated from the OS
• Assures Screen displays correct data
• Malware can not redraw or screen
scrape
• Secure messaging
• Support on Intel and Android
First Rivetz secure display Trustonic
Tools July 9th 2014
Trezor secure display

6. Secure Input
• Pin can’t be stolen by software or
malware
• No key loggers
• Isolated from the OS
• Assures user inputs PIN not a
program
• Assures user intent is collected
• Supports private Key entry Example secure pin entry using
secure display for security
Note: scrambled pin pad

7. Protected process
Bitcoin Instruction Signing
• Isolated Execution
• No exposure of Private key
• Secure Pin Compare
• Secure local business
process

8. User
Connected
Personal and Private
Synced
Device multi-sig
Co-operatingRedundancy
A Network my of devices
• Manage new devices
• Kill lost devices
• Limit compromised
devices
• Assure backup of keys
• Require multiple devices
for large transactions
• Stronger Identity and
privacy

9. Security Services not Wallets
Blockchain.info Xapo Coinbase Electrum Mycelium
Bitcoin Security Services API and tools
Trezor Rivetz Other and Smartcard
HARDWARE

10. Built-in Bitcoin – the device you have
• Intel Chips supporting trusted execution are in Tablets, Laptop
Desktop and Phone
• Arm Trustzone is in all current high end ARM designs
• Trustonic on all of Samsung
• AMD includes Trustonic on all AMD System ON a CHIP (SOC) for
tablets and PC
• 450 Million deployed today
• 1.3 Million new devices every day

12. A global audience of devices.
What We Build

13. Thank You
Questions?
Presented By:
Steven Sprague
CEO
Rivetz Corp
steven@sprague.com