Quote from: Coin-Keeper on March 13, 2025, 09:06:54 PM

Quote from: satscraper on March 12, 2025, 05:54:50 AM

Quote from: Coin-Keeper on March 11, 2025, 06:23:22 PM

if somehow the software could pull a switch address a nano-second after I confirm on my Trezors. I am just trying to think out of the box here. I have been using Trezors since early on with the T1 and several T's as well. I triple check the display and have never had any issues at all.

Not possible to infiltrate the signed transaction and keep the signature valid at the same time.

As soon as Trezor ^{or any other HW}will sign transaction with eligible destination address there is no way for any software client ^{no matter if the latter is infiltrated or not} to switch that address ^{or any other details of this transaction}. If the client will manage to change ^somehow the destination address in transaction signed by Trezor^{or any other HW} the relevant signature will be invalid. ^{This ensures the transaction can't be tampered with after signing.}

Satscraper,

This was a great and clear answer. It is what Trezor users expect. I/we have always suspected what you posted is spot on. However; I would love to read a "paper/link" clearly showing why this is so. I would love to dissect and see the transaction torn apart to better visualize how a swapped destination address (after a Trezor confirm) invalidates the entire transaction. I am not losing sleep over this but I feel like with me being a Crypto person for over 10 years I should be able to nail this in my mind. I cannot. I believe it and I know Trezor (and others) were designed for this to be true. I would love to spend the time to rip this apart and learn something beyond basic here. Just saying!!

In general, signing data means the applying of the cryptographic hash function to them which is a "trap-one-way" function. Should even one bit of these data changed some how the relevant hash will be changed. This the way how hash functions work. If you love to read papers try this "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems".

Also you can find a little less technocal explanation inside this readings.