pull down to refresh

93 sats \ 2 replies \ @sime 31 Jul \ on: Mk3 Security Advisory security bitcoin bitdevs

Im assuming this, but wouldn't multiple entropy inputs mitigate this ?

The non airgapped hardware wallet starting with T get local and remote entropy to protect against a lousy RNG.

write
compose
13 sats \ 1 reply \ @k00b OP 31 Jul

I recommend reading block's report: https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware

The problem wasn't that they lacked a good entropy source. It's that they had a bug that made them choose a bad entropy source.

reply
114 sats \ 0 replies \ @sime 31 Jul

Yes, but entropy mixing allows you to choose the better entropy.

Assuming the mixing itself doesn't have a bug.

reply