zondax / ledger-arweave Goto Github PK

The app appears to hang when opened on Ledger Nano S with firmware 2.0 installed. I believe Zondax is already aware of this? Is there an ETA for when this could be fixed?

When trying to connect using TransportWebUSB I'm now getting the error: name: "TransportInterfaceNotAvailable", message: "Unable to claim interface." even though it worked previously.

So I tried to use the TransportWebHID as a fallback. It's possible to do any single action like requesting the address but attempting anything afterward will return Error [65535] InvalidStateError: The device must be opened first. Not sure if that's caused by the TransportWebHID module or the ledger-arweave one.

🔗 zboto Link

We need to add this to the APDU docs

Originally posted by @jleni in #1 (comment)

What should be fixed in the above lines? I guess the hardcoded value 5?

Reenable integration tests once there is emulation support for RSA.

They had to be disabled here:
717e8c4

Comment here is incorrect:

https://github.com/Zondax/ledger-arweave/blame/1ff63e4ba8e286b5439a88cc61e5cd0ed76c33f9/app/src/crypto_store.c#L289

0x10001 != 65337

🔗 zboto Link

Ledger mentioned it was a compatibility issue on architecture with arweave app. do you know what issue? is it resolved? What's the current status? Since I read there is still a update on this project in recent weeks.

Very much look forward to your answer.

Thanks!

🔗 zboto Link

LedgerHQ#17

🔗 zboto Link

https://www.npmjs.com/package/@zondax/ledger-arweave

Hey, I have setup this project locally with a ledger nanos device, and installed the Aweave application on my Ledger nanos device successfully, what's more, I also managed to connect my ledger nanos device with arweave app, and I can see the imported address as follows:

But when I look into the #get address test cases, in the test case, the expected address is 47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU, which is different from the address generated on arweave.app, In my understanding, both of the address are derived from the mnemonic words "equip will roof matter pink blind book anxiety banner elbow sun young", did I setup anything wrong?

🔗 zboto Link

Hello team — passing along this feedback from my experience using a Ledger (Nano S+) to store AR tokens in cold storage.

Key question causing confusion: why does the Ledger app derive the same Arweave address regardless of whether I use my passphrase derivation?

Context: A customer can have 2 PINs to unlock his/her Ledger. The 1st PIN reflects a 24-word seed private key and derives "honeypot addresses" on Ethereum, Bitcoin, and Solana. The 2nd PIN reflects a 24+1 — seed AND passphrase — private key to be used as primary addresses. This more-secure key generation method is not unique to Ledger; GridPlus allows the same, for example.

Confusion: For every chain I've used, the different private keys create a different set of addresses. However, on Arweave (using arweave.app), I always get the same address. This is the case whether I click the "Connect with Ledger" button or the "Verify address" button in the web UI. I always see the same Arweave address.

Is there perhaps a bug in the Ledger implementation that is restricting the app from ingesting all the entropy? If so, I would classify this as a high-priority security concern since users have separate trust assumptions for 24 word vs. 25 word (passphrase) wallets.

Per @jfbeats in "arweave.app wallet" Discord: "my guess is that the base key is generated once and saved while the passphrase variations don't trigger a regeneration"

🔗 zboto Link

read the release notes, it seems only ledger nano s and s plus are supported.

It is not working right now. It is not running the signing algorithm. It is only taking screenshoots and comparing them.

When the parser fails it returns about 28 bytes from the codelines mentioned above. Is this ok or should this be changed?

Is there a timeline for when a new release of the @zondax/ledger-arweave package will be cut on NPM? This is currently a blocker for a release on my side. Would be great to have it if possible 😄