hey everybody it is an exciting day today it is new feature discussion day yay new feature discussion day woo yeah feature discussion day so what the heck is that well we're going to talk about a potential new feature which maybe kind of sort sorta probably yeah is gonna come to daedalus so many of you are fans of paper wallets i am as well uh it's a long part of the legacy of the cryptocurrency space and we are right now developing a qr code generator to move credentials from daedalus to another device and we are going to be using that for the voltaire cell phone app and then it got thinking well i just did that big lecture on pgp and security using these magical things called ub keys and it's one of my favorite security devices it's like the swiss army knife of crypto so why don't we build a better paper wallet why don't we build the best paper wallet why don't we build a paper wallet that is so amazing and secure and awesome and easy to use that we would be willing to have a bounty so how about this why don't we build something as a bounty that i can put one million dollars of ada in it and publish the paper wallet both the private part and the public part out in the open and the challenge is if you can hack it you can keep it would that be something interesting so let's talk about how to build it all right so qr codes for those of you who don't know look like this you've seen them all around they come all around they can store a lot of data you can do color qr codes you can embed pictures in them and so forth and basically uh how they work is that you scan them like a barcode with your cell phone camera or your laptop camera or your pc webcam and your computer can interpret it and then take the data payload so let's start with okay let's start with two qr codes okay i'll rewrite that for qr code and i'll do orange for the private one how about that you have a public qr code and this is kind of an address that people can pay to and verify the balance that is stored on that wallet and you have a private qr code and what we're going to do is have a shielded qr code so what that means is you take your private keys your data maybe your wallet recovery phrase and you take all of that and shielded means that you encrypt it okay so computer can scan it and get the encrypted payload out of the qr code but they can't decrypt it the problem is that usually when you shield it you use a password right and passwords are bad people are really bad at picking passwords and it's not really the most secure thing in the world and if somebody takes that paper wallet they can conduct a whole bunch of brute force attacks with rainbow tables and things like that and unfortunately they're probably going to be able to get your wallet recovery phrase but what if we had an id center in daedalus and we're gonna have to build something like this for prism anyway as you guys upload you did and that id center lets you upload your public pgp key okay if that's the case then we can use the openpgp.js library to encrypt your shielded qr code oh and guess what we don't need to store your private key for that encryption in daedalus you don't need to enter a private key any of that stuff why because if you have one of these guys because we're going to be adding in ub key support at some point to daedalus in the hardware center you can just simply whenever you want to decrypt the wallet here's your paper wallet you'll have a private part and a public part all you have to do is just take the wallet hold up the private part to your webcam or your cell phone for eventual mobile support scan it okay scan and then it'll say ah this is encrypted and requires you to decrypt with your key you plug it in enter your pin code and it will decrypt and restore your wallet recovery phrase automatically no entering of keywords anything like that super easy user experience hold up like you're scanning menus these days and restaurants and quarantine because they don't want to give you menus anymore you click a key in you enter a pin code and voila you have started the road recovery there here's the beautiful thing if that paper wallet ever gets compromised meaning that if somebody gets access to it like for example when you're printing it they get into your printer's memory from a shared printer or something like that and they print their own copy out someone breaks into your safe and they find the paper wallet that private part is encrypted and as a consequence and it's encrypted with a very strong standard rsa 4k come on that's pretty good that's how the internet is encrypted no one's going to be able to decrypt that in fact i'm so confident in this if we were to implement a scheme like this what i'll do is i'll load one million dollars worth of data into a wallet of this nature and i'll publish both the public and the private part to the web through my twitter and on our website and we'll put a little disclaimer if you can hack it you can keep it how about that so there's a lot to do to implement a feature like this we're thinking about all the logistics we'd have to get everything security audited we're obviously going to have to try it out here but i think that's a really good bug bounty to see if we did everything correctly or not and get some assurance that these things work properly and it's a beautiful user experience when you make your wallet you'll have a little button back up on paper you can click the button and you can enter in your hardware key just plug it on in and then suddenly you have the most secure paper wallet ever generated in the industry we can do colored qr codes and make them very beautiful and we can have a beautiful template so when you print that it'll have the prettiest paper wallets in industry as well and you can put these certificates anywhere you want we can even explore hot seat multisig what the heck is that if you guys remember the old video games the 90s they had instead of multiplayer was called hot seat which basically meant you had multiple players but you used the same computer and people would just get out of the chair and somebody else would come in it was very popular turn based games well similarly you could do an m of n encryption so for example if you have uh you know two of three then you could use three ub keys you could upload three uh public keys rsa keys to the id center and then any two that come together can decrypt the wallet so you can store a paper wallet and you require multiple people multiple keys to be able to access that so we can even explore mfn so this is an example of rapid innovation that's coming thanks to the new daedalus platform and thanks to shelley we can talk around these things and think around these things and really innovate and push things along and even talk about potentially you know how could we do this with some sort of cold staking component so you can back up your keys on paper and then but you can still stake for example something to think about it also this pgp infrastructure with keys means that your spending password can rotate how pgp works is that you have what's called a session key so every time you encrypt something with pgp it generates a new key and then it encrypts that key after you've used it to encrypt your file with your public key so every time you encrypt something you're rotating the session key it's a nice little security feature that they have and pgp under the hood uses aes 256 which is the gold standard in symmetric crypto it's very fast intel and amd both have acceleration cores for processors as disarm so it just works really well on all devices and the military uses to secure classified information so something to think about it's a cool new feature i'm pretty excited about it uh i think we can do it after we clear this shelly backlog and we get through all these things this is the fun part of my day where we get to do new feature day yay if you guys think this is something interesting and you want to go for it i'm definitely interested in it and i would love to do a bounty a million dollars worth of veda and a paper wallet and if you can hack it you can keep it of course we'll put all the legal disclaimers and all that other stuff the lawyers will have to figure out how to state all that stuff and we'll probably only leave it on that particular wallet for like three or six months or something because i don't want that money locked up forever but you get the idea we're confident and um we stand behind the things that we do so we'll we are actually already investigating this feature because we are doing a shielded qr code and we're building that in data list for voltaire i would love to have a uv key component or any hardware u2fa component and i think this would massively simplify backing up your wallet because you can you have a non-digitized secure paper wallet that if that piece of paper is compromised it does not result the problem so so there you go okay i just wanted to make a quick video for new feature day talk about the future and i'll occasionally make these videos from time to time to give you various ideas of things to do and i think you're uh you're gonna have some fun with it we are definitely gonna build an id center into daedalus because we need to for prism we're definitely gonna start integrating hardware support not just ledger and tresor but things like uv keys because it just adds so much security to the wallet experience they give you access control they give you the ability to have secure spending passwords and why not do it for recovering backup and you never actually have to write the words down and you think about the recovery uh mechanism literally you're just scanning your uh your paper wallet with a webcam and then putting in your flat life your uh your little ub key and entering a pin code and you've restored your wallet that's pretty simple right and that is what we seek simplicity security and of course fun has to be beautiful fun and secure and it'd be really cool to have custom templates on the paper wallets pictures of your kids all kinds of things you can print your own text on it these types of things we want to have that this is the daedalus of the future this is the product of the future and i cannot wait to see it evolve and grow and i am so glad that it shelley is out because it means that i can now focus my time instead of when jelly i can focus on things like this that improve your practical security enormously and encourage our community to have a better security mindset so if this is something interesting to you i highly recommend you watch my security mindset video that i did it talks about securing your wallet recovery phrase and you start learning a little bit about how to use these devices or devices like them to use uh file encryption and for access control fifty dollars spent there is the best investment of your digital life and it's gonna make your life a lot easier and better okay thanks for listening and until next time have a nice day from warm sunny colorado
