pull down to refresh

155 sats \ 3 replies \ @k00b OP 31 Jul \ parent \ on: Mk3 Security Advisory security bitcoin bitdevs

mk4, mk5, and Q only use 32 bits of cryptographic entropy (when they should use 256) due to the same bug. they are crackable. not trivially crackable like the mk3, but relative to nonbugged entropy, very very very crackable.

write
compose
218 sats \ 2 replies \ @SimpleStacker 31 Jul

my big question is how did no one notice the weakness earlier?

one of my biggest security assumptions, that flaws will be exploited quickly ( so widely adopted and seasoned systems are safe) is being thrown into question

reply
3 sats \ 1 reply \ @k00b OP 31 Jul

very hard to spot bug: #1536646. also fewer people read the code than you'd think.

reply
208 sats \ 0 replies \ @SimpleStacker 31 Jul

i dunno man, if I'm a HW wallet maker.... this is like literally my #1 priority in terms of testing... the true entropy of the wallet

and because of a wrongly specified if then traversal?? this just looks bad

reply