tapsigner-hints.md

Developer's Guide and Usage Hints for TAPSIGNER^™

Setup Sequence

1. Verify the card is legitimate (certificate check), and empty.
2. Run new command to pick the secret.
3. Derive your favourite path if it's not 84h/0h/0h.
4. Capture a backup (do not prompt for AES key, ever).
5. Get new PIN code from user.
6. Set the PIN.

Usage

• Take the hardened parts of your favourite subkey and use the derive command once to set it.
• Use the sign command with non-hardened (0/0... 1/0, 0/99, etc) parts.

Remember to retry sign command if you are unlucky!