Conversation

This Tweet was deleted by the Tweet author. Learn more

It mostly applies to the Trezor One, but it doesn't have on-device passphrase entry and I think U2F is only based on the seed and didn't require unlocking with the PIN and providing the passphrase. Trezor One also only has a partial workaround for secure PIN entry and recovery.

Daniel Micay

@DanielMicay

Replying to

@DanielMicay

Having the touchscreen able to provide sophisticated on-device input is a killer feature able to improve security a lot, since you don't expose passphrases or any details about the PIN. The same thing goes for not exposing details about the recovery seed during a recovery.

3:49 AM · Nov 3, 2018Twitter Web Client

Replying to

- I wasn't aware it mostly applied to the Trezor One. Are there plans to write it for the Trezor T, and to integrate the security features of the pin+passphrase? (For U2F and anything else that used only the seed?)

Replying to

and

- how does integration with existing software compare with the

@nitrokey

Show replies