This is cool. Funds from an #acorn sent to a Bitcoin exchange. Acorn->Cashu->Lightning->Exchange

“Cryptography is notoriously difficult to implement” That’s why formal verification programs exist, rather than trusting an anon dev.

Canadian Centre for Cyber Security

Cryptographic Module Validation Program (CMVP) - Canadian Centre for Cyber Security

Cryptographic Module Validation Program (CMVP)

The time has never been better. Keep building.

For those interested and given recent event, I now have a SECURITY.md document for #safebox #acorn. You can read it here:

GitHub

safebox-acorn/SECURITY.md at main · trbouma/safebox-acorn

Separately installable acorn component from safebox - trbouma/safebox-acorn

Now the other way #nostr #safebox #acorn 

Looks and tastes like Lightning, but ecash and relays behind the scenes #nostr #safebox #acorn

Very cool. Made a lightning payment from external wallet to an #safebox acorn wallet. The safebox lightning gateway negotiated and accepted the payment on behalf of the registered wallet and immediately sent the funds as ecash to the receiving wallet which then shows the updated balance. The user never even needs to know (or care) that it was ecash in the background. All the care about is sats being sent to a payment address.

I dig that steady streams of sats coming in while working on #nostr #safebox. The current #safebox deployment is chugging away but now in legacy mode as I am doing a major engineering refactor based on what I have learned.

spentropy

Working on next generation of #nostr #safebox - payments now include sending of ecash to a nip05 address - just like Lightning, but not Lightning - payment transmitted as ecash via giftwrapped messages.

2009: running bitcoin 2026: runs

If you’re going to do real security business, you have to go through the Cryptographic Module Validation Program. Sadly, for the Bitcoin community, these programs are mostly avoided and despised. Typical certification takes 9-12 months costing hundreds of thousands of dollars. It a bit more due diligence than a commit that ‘runs’ along with podcast. #bgu (Bitcoin Grow Up)

Cryptographic Module Validation Program - Wikipedia

The Cryptographic Module Validation Program (CMVP) has been in place for decades. I just assumed that hardware wallet vendors would be following this. I guess not.

Cryptographic Module Validation Program | CSRC

As of November 7, 2020, the CMVP requires that all FIPS 140-2 and FIPS 140-3 module validation submissions include documentation justifying conform...

BGU -> Bitcoiners Grow Up.

Déjà vu all over all. In the early days of commercial aviation metal fatigue was not well-understood, leading to disasters. It seems like the same with the hardware wallet industry not understanding entropy.

de Havilland Comet - Wikipedia