<p>Security is always an issue and complex systems like operating systems are prone to attacks. However, it is possible to use an offline machine to create the signed transactions and then export them to another machine. </p>

<p>For example a soft copy of those signed transactions could be copied on to a fresh USB stick, or printed out on paper as plain text or QR codes and so on. These transactions could then be imported into an online Bitcoin client that does not have the private keys, but can just transmit the transactions to the network. </p>

<p>Your private keys are always held offline and thus only exposed to physical attack vectors which should be sufficient to relieve your concerns.</p>

CC BY-SA 4.0
2020-10-31T22:31:05.097Z
I would not recommend connecting a printer to the air-gapped computer (especially USB printer). If you want to transfer data to/from the air-gapped computer you can use RFC1751 encoding/decoding. If you want to print data - use a pencil. I was thinking about this and this is why I added RFC1751 encoding/decoding tool in my live CD: https://github.com/vstoykovbg/cryptopup/ 

Maybe haveged is a good solution for the PRNG problem, but I recommend mixing the noise from the microphone or noise generator just in case: https://github.com/vstoykovbg/doublerandom
Valentin Stoykov
CC BY-SA 3.0
2011-12-21T09:48:31.163Z
Is there any guides or tools on how to create the signed transaction then import it into another client?
Sean Chapman
CC BY-SA 3.0
2011-12-21T09:55:45.387Z
Take a look at the forums here: https://bitcointalk.org/index.php?topic=28278.0
Gary
CC BY-SA 3.0
2011-12-21T09:41:06.673Z
2011-12-21T09:41:06.673Z
Gary
<p>It's clearly safe to create a savings wallet offline with a live CD, as no data can be sent to an attacker even if the live CD image is compromised (which seems unlikely).</p>

<p>However, when it comes to sending a transaction from a savings wallet, the client must be connected to the internet, so the risk increases. If you create a live linux CD, with an OS such as Ubuntu, it is out of date within a fairly short time of it being created as the live CD does not receive the latest patches that a permanent installation normally receives.</p>

<p>Presumably this means there's a chance (however small) that when you use the live CD and connect to the internet a security hole will exist that can be exploited to steal your wallet and wallet passphrase next time you enter it. <strong>How big is this risk?</strong> (Am I just being totally paranoid?!) </p>

<p>The severity of the risk is obviously a difficult thing to determine in the context of all possible live CDs, so perhaps a better question is this, if the first one is too difficult: <strong>have there previously been any security holes in live CD releases that allow an attacker to remotely control the computer?</strong></p>

CC BY-SA 3.0
2011-12-21T08:19:47.820Z
I think this question belongs to other SEs, like StackOverflow, SuperUser, Ask Ubuntu, or IT Security, as it is not a Bitcoin-specific problem.
ThePiachu
CC BY-SA 3.0
2011-12-21T09:42:47.590Z
In my opinion, there is sufficient concern about private key safety within the Bitcoin community that it justifies a Bitcoin-specific answer here.
Gary
<security><wallet><linux>
How safe is it to use a Linux live CD to access my savings wallet?
Highly Irregular
# How safe is it to use a Linux live CD to access my savings wallet?

(Asked by: username_0 on 2011-12-20)

It's clearly safe to create a savings wallet offline with a live CD, as no data can be sent to an attacker even if the live CD image is compromised (which seems unlikely).

However, when it comes to sending a transaction from a savings wallet, the client must be connected to the internet, so the risk increases. If you create a live linux CD, with an OS such as Ubuntu, it is out of date within a fairly short time of it being created as the live CD does not receive the latest patches that a permanent installation normally receives.

Presumably this means there's a chance (however small) that when you use the live CD and connect to the internet a security hole will exist that can be exploited to steal your wallet and wallet passphrase next time you enter it. **How big is this risk?** (Am I just being totally paranoid?!)

The severity of the risk is obviously a difficult thing to determine in the context of all possible live CDs, so perhaps a better question is this, if the first one is too difficult: **have there previously been any security holes in live CD releases that allow an attacker to remotely control the computer?**

**Tags:** security, wallet, linux

> **Comments:**
> **username_1**: I think this question belongs to other SEs, like StackOverflow, SuperUser, Ask Ubuntu, or IT Security, as it is not a Bitcoin-specific problem.  
> **username_2**: In my opinion, there is sufficient concern about private key safety within the Bitcoin community that it justifies a Bitcoin-specific answer here.  

---

## 1 answers

### Answer by username_2 on 2011-12-21. Score: 4 | Accepted answer

Security is always an issue and complex systems like operating systems are prone to attacks. However, it is possible to use an offline machine to create the signed transactions and then export them to another machine.

For example a soft copy of those signed transactions could be copied on to a fresh USB stick, or printed out on paper as plain text or QR codes and so on. These transactions could then be imported into an online Bitcoin client that does not have the private keys, but can just transmit the transactions to the network.

Your private keys are always held offline and thus only exposed to physical attack vectors which should be sufficient to relieve your concerns.

> **Comments:**
> **username_4**: Is there any guides or tools on how to create the signed transaction then import it into another client?  
> **username_2**: Take a look at the forums here: https://bitcointalk.org/index.php?topic=28278.0  
> **username_3**: I would not recommend connecting a printer to the air-gapped computer (especially USB printer). If you want to transfer data to/from the air-gapped computer you can use RFC1751 encoding/decoding. If you want to print data - use a pencil. I was thinking about this and this is why I added RFC1751 encoding/decoding tool in my live CD: https://github.com/vstoykovbg/cryptopup/   Maybe haveged is a good solution for the PRNG problem, but I recommend mixing the noise from the microphone or noise generator just in case: https://github.com/vstoykovbg/doublerandom  

---

