Open-source Solana wallet
Open-source Solana wallet
Most wallets keep your private key on a phone or laptop that's online all day. With Coldstar, the key sits on a drive you can unplug and put away.
Three steps
Use one you already have. Coldstar wipes it and sets it up as a wallet from the command line.
Coldstar decrypts the key in your computer's memory, signs, and overwrites the key about 100 microseconds later.
When you take the drive out, the key goes with it.
Every wallet trades some convenience for isolation. Coldstar sits near the isolated end and works with a drive you already own.
Argon2idThe key is encrypted on the drive with Argon2id. It's slow on purpose, so guessing your password takes a very long time.
mlockWhile the key is decrypted, its memory is locked so the operating system can't write it to disk. Your key never enters the Python app at all.
zeroizeAfter signing, the key, your passphrase and the derived key are overwritten with zeros, even if signing fails.
open sourceThe code is public on GitHub. You can read it or build it yourself.
Coldstar is free and open source. It hasn't had a third-party security audit yet, so start with small amounts.