Quote from: jackg on July 06, 2019, 05:13:59 PM

You have to generate the paper wallet somewhere unless you use dice throws and do it purely mathematical.

An SD card can still be compromised when you plug it in, unless to an air-gap. Same with USB drive. Are SD cards' memory more reliable than USBs? I am trying to think of something better than just encrypting a text file with the key pairs and sticking that on a memory card or stick of some kind.

Quote from: jackg on July 06, 2019, 05:13:59 PM

You have to generate the paper wallet somewhere unless you use dice throws and do it purely mathematical.

IF you have to go the paper wallet route (remember, HD seeds are not supported and all the paper wallet websites don't support my coin) what is the best way to go about it? As far as I can tell it is:

1. Generate and text strings/QR codes on air-gapped machine.

2. Print paper wallets from this machine.

3. Properly secure the resulting paper wallets from natural hazards (fire, water etc.) and prying eyes.

4. Encrypt private key before printing via BIP38 ASC256 or something else.

Problem I see is as soon as you scan private key QR from paper wallet into internet-connected machine to spend that coin, it must now be considered in the wild (same is true of memory cards/stick though). The way around this is to use the air-gapped machine to sign txs instead of generating private keys, using QR's to shuttle info back and forth between connected and air-gapped machines. While QR's could be printed by both, probably easier to use cheap smart phone with all network connectivity disabled since you can use's camera to scan and screen to display QR's. This should be its only means of communication to the outside world.

Based on this, how can I be sure a phone's network connectivity (cellular, wifi, bluetooth) is COMPLETELY disabled? I've heard it is possible to remotely access a phone even if all network are turned off in settings? Its not like you can just rip out the relevant hardware from inside it.

Now my wallet doesn't have a mobile version, only a desktop one, so this idea is out. So my options are:

1. An air-gapped desktop printing QRs back and forth
2. A paper wallet of some method
3. Trusting in memory cards/sticks with encrypted text files of key pairs. Based on what has already been said I guess I need multiple cards/sticks to ensure data integrity.

As reluctant as I am to say it the later seems like where I'm probably headed.