3rd Party Independent Security Audit of the D’CENT Wallet

3rd Party Independent Security Audit of the D’CENT Wallet

At IoTrust we do not believe that a company can just manufacture a security device and declare it to be trustworthy. We believe that the security of a device must be verified independently.

 

 

The security of our D’CENT Biometric Wallet has been confirmed by a trusted third party. The audit provides independently prepared evidence that D’CENT Biometric Wallet holders may continue to be confident in the security of our cold storage tools.

 

After reading this blog entry you will understand that the third-party security audit verifies that IoTrust is truly committed to “delivering trusted connectivity”.

 

This week Coinspect, an independent security evaluation laboratory best known for performing security audits of Bitcoin Core, ZCash, and various other wallet solutions, completed its security evaluation of the D’CENT Biometric Wallet.

 

The D’CENT Biometric Wallet uses a dual-chip architecture with the main MCU (STM32 chip) handling control of the device peripherals, managing the connection to the host computer, and parsing of cryptocurrency transactions. The MCU also acts as a proxy to the Secure Element (an NXP chip), where it performs cryptographic operations using secret keys stored in its protected memory.

 

In the security evaluation, Coinspect consultants reviewed the source code of the MCU firmware and Secure Element applets. Analysis of the source code included a review of resistance of the product to various state-of-the-art attacks. The audit included attacks that exploit key management, transaction signing, and other malicious threats.

 

Coinspect identified a few minor issues. None of the issues identified were significant enough that an attacker could steal funds from a D’CENT Biometric Wallet using an exploit isolated from a host computer.

 

In April 2019, Coinspect reviewed IoTrust’s remedies for the issues previously identified. They concluded that the fixes implemented were correct. These issues are now considered resolved.

Was this article helpful? 
Please spread the knowledge!
[D’CENT Wallet]
D’CENT Wallet is created by IoTrust, a company founded by security experts with over two decades of security know-how and engineering experience in developing deeply embedded security solutions based on secure-chip technology (SE and TEE). 

D’CENT Wallet caters to the diverse needs of cryptocurrency users, prioritizing security and user experience. Users can choose the Biometric Wallet, Card type Wallet, or the free-to-use Software Wallet.
Disclaimer:
This blog is for educational purposes only. Information presented here, including projects or brands mentioned, is informative and not financial, legal, or tax advice. While we strive for accuracy, we cannot be held liable for any inaccuracies. Cryptocurrencies are inherently risky. Do your own thorough research and consider consulting a financial advisor for investment decisions aligned with your goals and risk tolerance. External links may be present and we are not responsible for their content or practices. Review their terms of service and privacy policies.

Biometric Wallet

"YOU are the Key" to Your Crypto Fortress! 
D'CENT Biometric - $119.00