Walletwasabi: Verify receiving address on hardware wallet

[MaxHillebrand]

Problem

When generating a receiving address, the user does not know if it actually belongs to the HD wallet of the hardware wallet.

Solution

Right click on receiving address, menu: Verify address on hardware wallet.
Of course this only works when the hww is actually connected.

[nopara73]

I didn't know there's such a thing possible. What's the HWI command for this?

[nopara73]

Wait, what's the point of this?

[nopara73]

If I don't trust the software I'm running, then the verification would pass when the software is malicious.

[MaxHillebrand]

It is possible for Ledger and Trezor, both for their own software and electrum.
I'm not sure about HWI command, maybe @Achow101 knows...

If I don't trust the software I'm running, then the verification would pass when the software is malicious.

Well, this is the point! I don't trust Wasabi to give me a receiving address that belongs to my hardware wallet. So I click Verify on HWW, and then it shows on the HWW screen the address. If it shows the same, then I know it's mine, if it shows a different, I know Wasabi is trying to MITM.

[nopara73]

Aaah, ok, I misunderstood. The hardware wallet shows the "verified" label or whatever. Makes sense now.

[achow101]

You can use the displayaddress command for this. This will display the address at a given derivation path on the screen of the device (if it has one, otherwise it will return an error) and return that same address as output of that command if nothing has gone wrong.

This allows for 3 different checks that can be done:

• Address in Wasabi matches the address shown on device
• Addresses returned by the command matches the address shown on device
• Address in Wasabi matches the address returned by the command

If any one of those three checks fails, then something is trying to MITM or just generally broken.