pull down to refresh

53 sats \ 5 replies \ @Scoresby 30 Jul \ parent \ on: Mk3 Security Advisory security bitcoin bitdevs

The main line there is that this may not be contained to just mk3. The Coinkite advisory says it does not affect mk4, but as the screenshot shows some people are not sure about that.

The vulnerability is that if you used a mk3 to generate your seed, it is likely not using very good entropy. And so someone else can deduce your private key.

write
compose
3 sats \ 4 replies \ @WeAreAllSatoshi 31 Jul

good summary. this should be higher

reply
155 sats \ 3 replies \ @k00b OP 31 Jul

mk4, mk5, and Q only use 32 bits of cryptographic entropy (when they should use 256) due to the same bug. they are crackable. not trivially crackable like the mk3, but relative to nonbugged entropy, very very very crackable.

reply
218 sats \ 2 replies \ @SimpleStacker 31 Jul

my big question is how did no one notice the weakness earlier?

one of my biggest security assumptions, that flaws will be exploited quickly ( so widely adopted and seasoned systems are safe) is being thrown into question

reply
3 sats \ 1 reply \ @k00b OP 31 Jul

very hard to spot bug: #1536646. also fewer people read the code than you'd think.

reply
208 sats \ 0 replies \ @SimpleStacker 31 Jul

i dunno man, if I'm a HW wallet maker.... this is like literally my #1 priority in terms of testing... the true entropy of the wallet

and because of a wrongly specified if then traversal?? this just looks bad

reply