Migrating Your Nexus Wallet to Tritium – Colin Cantrell

The first thing to do before anything else is to create your user name. This will establish a new signature chain with corresponding default and Trust accounts.

To do so, simply fill out the Create User form with your chosen user name, password, and PIN number. The password must be at least 8 characters, and the PIN of minimum length 4 digits.

Recommended Security

We recommend that users have at LEAST 8 characters in their password, and at LEAST 4 characters in their PIN. This will make offline password cracking take 50 billiion years to break the password/pin combination.

DO NOT USE COMMON WORDS FOR YOUR PASSWORD, THIS WILL LEAVE YOU VULNERABLE TO DICTIONARY ATTACKS THAT COULD DRASTICALLY DECREASE THIS RESISTANCE.

We therefore recommend you using secure random number generators for your password:

$ openssl rand -base64 8

xrMBADJZv48=

The above password generator will provide account security comparable to the above 50 billiion years to break, and not include any common words that would enable a dictionary attack success.

Security Considerations

The security of your account is important, so this section will follow a breakdown of how much more secure you can make your sigchain. Let us look at the required resistance to brute force a sigchain vs. legacy UTXO:

Sect571r1 (legacy private keys) are generated in 1.56ms, where to generate one key in a sigchain takes 500ms, being 319 times more difficult to break at equivalent password entropy.

The current resistance is 7.7291×10¹⁷¹ iterations to iterate and guess all private keys, with it taking 1.56ms per key, the time mine all keys would be 1.2057×10¹⁶⁹ seconds.

The following command can be issued if you have openssl installed:

$ openssl rand -base64 32

This will generate a long string such as:

F/DRfiUbRvtZmZi+BQgUouzHTmckhv0oJdNaNpZvA7k=

This uses 32 characters, in base64, making brute force resistance 64³² or 6.277101735×10⁵⁷ which would become around 3.138550868×10⁵⁷ seconds to break this password if your PIN was known.

This number is multiplied by 10 for every number you add to your PIN. A six digit numeric PIN, would increase resistance to 6.277101735×10⁶³ seconds.

If you want an even higher security standard, we recommend using your PIN as a second password (like 2 private keys).

$ openssl rand -base64 64

VPVaqjNxQgJucekY4+kBYyJgkF/0g64R4SYc9GYqsC0ntYLSisQbs+hHZB2+AKaDi0yQCBF9U32WKCozEhuAeA==

$ openssl rand -base64 64

dCStGOhTbTqtSp1UQ1j34SS9l3vBPtA1aSocXMpheRof9a5UFPa47Tv5UjUCydO0hf4Wj8gYMVRIuae5MKbojg==

This will give security properties of 7.762590462×10²³⁰ seconds to break into a sigchain. Which, if you don’t know, is a lot. 2¹²³ is the maximum amount of iterations possible with all the known energy in the universe, so this many seconds is well beyond resistant to attack.

Note: These iterations are based on the assumption that an attacker already knows your username, if they do not, this complexity only increases exponentially.

The above figure describes a resistance that would take an attacker 2.461501288×10²²³ years to break.

YOU ARE RESPONSIBLE FOR KEEPING YOUR ACCOUNT SECURE

After you create your login, your wallet will display the Migrate Account message. This includes buttons to help you immediately perform an assisted migration. It allows you to migrate stake and other balance from your Legacy wallet to your Tritium wallet.

If you choose not to migrate just yet, you can click elsewhere on your wallet to close the window and it will display again the next time you log in. You can also click “Don’t show this again” to skip assisted migration and migrate manually later. Instructions for manual migration are included later in this document.