What a paper pockets is and isn’t
It’s a key pair generated on a machine that isn’t linked to something, written down by
hand, and saved bodily. The cash will not be on the paper; they’re on the community, and the
paper holds the one factor that may transfer them.
It isn’t a pockets you utilize. There isn’t a steadiness show, no ship button and no restoration
course of. It’s an archive, suited to an quantity you plan to not contact for a very long time, and
poorly suited to the rest.
-
Put together a machine that has by no means been on-line
Or one booted from detachable media with networking disabled. The purpose is that no course of on it has had a possibility to ship something anyplace.
-
Generate the keys regionally
Utilizing official pockets software program transferred on detachable media, with its signature checked beforehand on a distinct machine. Unverified software program is the entire assault, and it’s a low-cost one to run.
-
Write every part down by hand
Tackle, spend key, view key and the mnemonic seed. By hand, on paper, twice. Not printed, as a result of a printer is a networked laptop that shops paperwork.
-
Confirm earlier than funding
Restore the pockets from what you wrote, on the identical offline machine, and make sure the deal with matches. A backup that has not been restored as soon as is an assumption.
-
Destroy the working copies
Wipe the machine or destroy the detachable media. Then ship a small check quantity, affirm it arrives utilizing the view key, and solely then fund it correctly.
The view key, which makes this usable
Monero separates the power to see incoming transactions from the power to spend them. The
view key will be imported into peculiar software program on a linked machine and can present what has
arrived, with no capability to maneuver something.
That solves the sensible drawback with archival storage: you possibly can affirm funds arrived and
monitor the steadiness for years with out the spend key ever touching a networked machine. Set this
up at creation time quite than later, when the offline machine could now not exist.
The place it appears proper and isn’t
A mistranscribed character produces a valid-looking key for a pockets that isn’t yours. A
printed copy that appears destroyed sits in a printer spool. A machine that was on-line final
week isn’t an offline machine. All three produce a outcome indistinguishable from success
till the day you attempt to get well, which can be years later.
The place the paper itself lives
The bodily copy inherits each danger paper has: hearth, water, fading ink, and being tidied
away by somebody who didn’t know what it was. Two handwritten copies in two areas covers
most of it, and neither location ought to be described on any machine. A notice that claims the place the backup lives is a map to the spend key. Ink and stress matter greater than they appear; a
delicate pencil entry will be unreadable in a decade, which is precisely the timescale this
association is constructed for.
Verifying the device earlier than you belief it with keys
The entire process rests on the generator being real, and that’s the step most frequently
skipped. A tampered generator produces addresses that look right and keys the attacker additionally
holds, and nothing concerning the output reveals it. No quantity of care with the paper afterwards
repairs this.
The challenge publishes checksums for its releases and indicators them. Checking the file in opposition to the
revealed hash earlier than operating it takes a minute, and verifying the signature on the hash file
takes a bit longer and is what really establishes the chain, since a hash revealed beside
a compromised obtain is price nothing.
Do the verify on a machine that’s nonetheless on-line, then take the verified file to the offline one.
Doing it within the different order is a standard intuition and it defeats the aim, as a result of the
offline machine has no strategy to fetch the reference values. And deal with a generator that provides no
checksums in any respect as unusable for this, no matter else it seems to do effectively.
Plan the exit earlier than the entry
Spending ultimately requires importing the spend key into software program on a linked machine,
which ends the offline property completely. Determine now that when this occurs you’ll transfer
your complete steadiness to a brand new pockets quite than spending a part of it and returning the remainder.
Partial spends from a key that has been uncovered are how folks persuade themselves an
association remains to be safe after it has stopped being one. The archive is single-use by
design, and treating it that approach is what retains it well worth the effort.
