This document discusses hardware security features for Bitcoin wallets. It outlines how ARM TrustZone and trusted execution environments can provide cryptographic functions like digital signatures and encryption within a trusted space isolated from the main application environment. This ensures sensitive data like private keys and transactions are signed in a way that cannot be tampered with. It also describes how a trusted user interface with security indicators and validation of inputs protects users by displaying information in a way only they can see and signing exactly what is displayed. Examples of partners utilizing these features are provided.

1. 1
Bitcoin hardware security
Robert Dyke
June 2015

2. Agenda
‹ What is Bitcoin?
‹ The Bitcoin wallet
‹ Hardware security features
‹ ARM TrustZone
‹ Trusted Execution
‹ Trusted user interface
‹ Cryptographic functions
‹ Partner apps
‹ Rivetz
‹ Ledger
‹ Demo
2

3. What is Bitcoin?
3

4. The Bitcoin wallet
4

5. Hardware Security
5

6. ARM TrustZone
6

7. Trusted Execution
TRUSTZONE™
SYSTEM-ON-CHIP
APPLICATIONS PROCESSOR
SMART CONNECTED DEVICE
TOUCHSCREEN
SENSOR
BIOMETRIC
SENSOR
NFC
BLUETOOTH
WI-FI
RADIO
SECURE
ELEMENT
BASEBAND
RADIO
A/V
OUTPUT
MASS
STORAGE
LOCATION
SENSOR
7

8. Trusted User Interface
8
Security Indicator
• Text or image
• Information securely configured by the
user and securely controlled by Trustonic
• Proove to the user that the screen is
TRUSTED by seeing this known
information
Message to be signed
• Transaction summary displayed by app
• Main application environment cannot
tamper with the message
• The user signs exactly what s/he is
seeing
User Validation
• Trusted PIN/password entry  Main
application environment doesn’t
have access to entered credential

9. 9
Cryptographic functions
‹ Digital signatures
‹ ECC, DSA, RSA
‹ Symmetric encryption
‹ AES, DES3
‹ Secure storage
‹ SDK provided

10. 10
Partners

11. 11
Rivetz

12. 12
Ledger

13. 13
Questions?

14. 14
Demo!