A follow up question: If we use magic backup w/ NFC cards, and Foundation were to disappear overnight, would we be able to use only the 2 physical cards to recover the wallet if we don’t have access to a Foundation device? This would be impossible without having a standard mnemonic, correct?
While the details are currently being worked out, it’s in our best interest for users to be able to recover from two cards without Foundation or a Passport Prime, so we will work on an independent tool to recover the seed in a disaster scenario.
We will make sure to make an announcement when the tool is ready.
I’ll have to grab you some clarification here on Monday, but here is how I’m pretty sure this is gonna work…
Files on the file browser will not be part of the magic backup (for now), but you’ll be able to transfer any and all files to or from the device whenever you like for offline storage.
Yes, but don’t forget that if you’re a manual user then you’ll still need an external storage medium (like an SD card) to store the metadata that will be encrypted by the shamir’d seed.
For the secured files — will there ever be a feature in which those be accessible/attainable via the Envoy app over bluetooth? Meaning, can I connect to the Prime using Envoy, view the stored files metadata, and download any I want from my Prime to my Phone/device (or transfer over bluetooth to Prime)? Would be useful for keeping files off iCloud unless needed (tax returns, pictures of drivers license, legal docs, medical records).
Are the 2/3 NFC card backups split using some standardized implementation of shamir splitting, and readable with standard NFC readers?
I’d like to know too whether there’s a reasonable path to recovery with the 2 NFC cards, without relying on Foundation app or servers. That should generally be the standard - that there’s some way to recover keys from backups entirely on your own, long after the hardware vendor disappears or stops supporting past hardware.
The Keycards are used to create a simple and secure 2-of-3 Shamir backup of the Passport Prime master private key. Under the default setup, 2 of the KeyCards secure a share each, with the third being encrypted and stored securely in the user’s iCloud Keychain or Android Auto-Backup. Advanced users that do not wish to secure a share in their personal cloud can leverage the third KeyCard to store the third share.
Our implementation follows the standard Shamir Secret Sharing h, and later in the year we plan to release a simple open source tool that can help reconstitute the master key from a threshold of shares using your phone or computer. This will act as a mitigation against the extremely unlikely event that your Prime breaks and Foundation no longer around.