Saturday February 27, 2021
Bitcoin (BTC) $47,550.00   Ether (ETH) $1,490.34
  • Events
  • News
    • Blockchain Technology
    • Capital Raising
    • Crypto Exchanges
    • Crypto Payments
    • Gaming & Betting
    • Networks & Protocols
    • Security
    • Vendor Technology
    • Wallets
NEWSLETTER SIGNUP
EXCHANGE 300+ COINS
CryptoNinjas
  • Crypto & Blockchain Links
  • Real-Time Market Data
  • Bitcoin ATM Map
  • Token Offerings/Listings
No Result
View All Result
CryptoNinjas
No Result
View All Result
Home Security

Ledger crypto hardware wallet certified by French cybersecurity agency

Published by CryptoNinjas.net
03/20/2019
Ledger crypto hardware wallet certified by French cybersecurity agency

Ledger, the Paris based blockchain and cryptocurrency security company, announced this week that its Ledger Nano S device received CSPN (Certification de Sécurité de Premier Niveau/ First Level Security Certificate) certification, making it the first and only certified hardware wallet on the market.

The security certificate is issued by ANSSI (Agence Nationale de Sécurité des Systèmes d’Information/National Agency for Information Systems Security), the French cybersecurity agency.

The CSPN Certification scheme was established in 2008 and is a process for undergoing evaluation across several categories, including firewall, identification, authentication and access, secure communications and embedded software. To achieve certification, ANSSI’s selected laboratory puts the product through multiple attack scenarios to challenge its security.

“We are proud to announce this independent certification from ANSSI. At Ledger, security is paramount, and while anyone can claim to have a secure product, it means much more coming from a trusted third party. This is an important milestone for Ledger, but it is only the starting point of a broader effort to certify all our products.

Eric Larchevêque, CEO at Ledger

External Assessment

Ledger constantly looks to enhance the security of its products, leveraging both external security researchers in its Bounty Program, as well as its industry-leading, in-house Attack Lab, the Ledger Donjon. Ledger’s Attack Lab looks to test the security of its products through state-of-the-art attacks to ensure the company is staying ahead of the latest threats. While internal programs are needed, an external and independent assessment further validates the company’s commitment to industry-leading security.

The Ledger custom operating system, BOLOS (Blockchain Open Ledger Operating System) and crypto-asset apps run on top of their secure hardware. It’s this combination of software and hardware that brings the highest level of security to each of the company’s products.

The Leder team says it will look to get this certification for additional Ledger products, including the recently launched Ledger Nano X, which is now available to start its certification process.

What CSPN Certifies

The following core security functions embedded in the Ledger Nano S are covered by the CSPN Certificate:

  • True Random Number Generator: To be aligned with the CSPN security evaluation scheme, Ledger strictly complies with security rules defined in the Security General Referential (also known as RGS. In short, the Random Number generated by the Secure Hardware is then fully post-processed by Ledger through the BOLOS. It is Ledger’s implementation that makes a user’s hardware wallet unique related to the seed.
  • Root of Trust: This security function ensures the end-user that their Nano S has been issued by Ledger. This feature can appear basic, but it is vital as it supports the security model and prevents attacks. A Root of Trust has been put in place by Ledger, acting as the Certification Authority, to ensure the user’s device is genuine. This genuineness is based on a mutual authentication between the Ledger Nano S and Ledger’s Secure Server. In other words, the Ledger Nano S authenticates the Ledger Secure Server and vice-versa — this ensures that it’s not possible to create a counterfeited and possibly backdoored device.
  • End-User Verification: This security feature is the Personal Identification Number (PIN) that the End-User must enter correctly before accessing all services provided by the Ledger Nano S. Having an End-User Verification to ensure only the genuine Ledger Nano S holder can access to their hardware wallet is a good start, but having a robust and secure implementation of this PIN verification is even safer. This security function ensures that it’s not possible to get access to the critical assets (such as the user seed) without knowing the correct PIN value — even for an attacker with physical access.
  • Post-Issuance Capability over a Secure Channel: On one hand, the Post-Issuance Capability is useful: Ledger not only can add new features to increase the security level of the product, but also reinforce it. When designing the Ledger Nano S, Ledger ensured implementing this security feature. For instance, this post-issuance capability is only available after successful mutual authentication is performed.
11
SHARES
FacebookTwitterLinkedinRedditE-MailTelegram

Related News

Hedera Hashgraph token HBAR integrated into Ledger Nano wallets
Featured

Hedera Hashgraph token HBAR integrated into Ledger Nano wallets

02/26/2020
Ledger Nano S crypto wallet users can now connect to ShapeShift
Crypto Exchanges

Ledger Nano S crypto wallet users can now connect to ShapeShift

12/11/2019
Ledger Vault crypto security platform obtains $150M crime insurance policy
Featured

Ledger Vault crypto security platform obtains $150M crime insurance policy

11/14/2019
Lithuanian crypto exchange Rokkex to integrate Ledger Vault security system
Security

EU crypto exchange Rokkex to integrate Ledger Vault security system

08/20/2019
EU crypto asset platform Coinhouse integrates Ledger’s wallet solution
Security

EU crypto asset platform Coinhouse integrates Ledger’s wallet solution

06/20/2019
Load More
Leave Comment

Where to Exchange

Bit2MeLeading Spanish Bitcoin ExchangeVisit
BL3P
European Bitcoin ExchangeVisit
ChangellyExchange & Buy 150+ CryptocurrenciesVisit
itBitAmerica's First Regulated Bitcoin ExchangeVisit
  • Trending
  • Latest
Glow programming language brings smart contract simplicity to Cardano

Glow programming language brings smart contract simplicity to Cardano

02/26/2021
This was avoidable – The lost Bitcoin fortunes

This was avoidable – The lost Bitcoin fortunes

02/26/2021
ZelaaPayAE deploys Pundi X's merchant crypto payment solutions for UAE

ZelaaPayAE deploys Pundi X’s merchant crypto payment solutions for UAE

02/24/2021
Anchorage raises $80M Series C, led by GIC, Singapore's sovereign wealth fund

Anchorage raises $80M Series C, led by GIC, Singapore’s sovereign wealth fund

02/25/2021
Tendermint invests in Tgrade to bolster Cosmos' growing DeFi ecosystem

Tendermint invests in Tgrade to bolster Cosmos’ growing DeFi ecosystem

02/24/2021
Crypto platform NetCents to offer users access to DeFi protocols thru Vesto

Crypto platform NetCents to offer users access to DeFi protocols thru Vesto

02/27/2021
SmartKey to integrate with GeoDB to build the blockchain-based data ecosystem

SmartKey to integrate with GeoDB to develop blockchain-based data ecosystem

02/26/2021
This was avoidable – The lost Bitcoin fortunes

This was avoidable – The lost Bitcoin fortunes

02/26/2021
Bitcoin exchange Xcoins receives In-Principle Approval for Malta's VFA license

Bitcoin exchange Xcoins receives In-Principle Approval for Malta’s VFA license

02/26/2021
Token-based commodities DEX Mettalex launches on Binance Smart Chain and Ethereum

Token-based commodities DEX Mettalex launches on Binance Smart Chain and Ethereum

02/26/2021
  • Home
  • Directory
  • Data
  • About
  • Contact
SUBSCRIBE

© 2016 - 2021 CryptoNinjas Disclosures | Privacy Policy

  • Home
  • Crypto Links
  • Market Data
  • Blockchain Tech
  • Exchanges
  • Capital Raising
  • Vendor Technology
  • Token Offerings/Listings
  • Payments
  • Wallets
  • Bitcoin ATM Map
  • Conferences & Events
  • About
  • Contact

© 2016 - 2021 CryptoNinjas Disclosures | Privacy Policy


Go to mobile version