BaoKey: making the display the attacker
A signing vault on the Baochip-1x Dabao, with an ESP32-S3 as a deliberately untrusted host. Every hardware wallet you have used makes the same promise: the key lives in a secure element, so the key is safe. The promise is smaller than it sounds. The secure element cannot read a screen. It signs the…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-10 14:58 · DEV Community — AI
BaoKey: making the display the attacker