lol... it's incredibly similar to what Kimi wrote... which is funny. I looked at the session logs and Kimi 3 didn't web search to get Block's article until well after it had already generated the majority of its analysis
strong passphrase needs to be pretty freaking strong if you didn't use at least 38 dice rolls.
maybe the mnemonics are safe, but you really don't have a good way of ensuring that you have sufficient entropy if you're not using measurable entropy (multiple random dice rolls, or plucking actually random words from a bucket of the valid seed words).
what I'm getting at is: aardvarkaardvarkaardvarkaardvarkaardvark is a lot of characters, but if the mechanism for guessing words is plucking them alphabetically, you're not gonna be in a good situation
I don't want to misrepresent my level of understanding here, so I'll ask outright:
I thought rainbow tables were pre-constructed. Are you informing me that iterating words from the dictionary to create combinations of common words is a 'rainbow table' ?
@Lobotomite shared block's very thorough analysis: https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware
it's great, I was just reading it.
lol... it's incredibly similar to what Kimi wrote... which is funny. I looked at the session logs and Kimi 3 didn't web search to get Block's article until well after it had already generated the majority of its analysis
distillation or determinism? i wonder if we'll ever know
turtles_all_the_way_down.gif
The way I understand it, strong passphrase and/or human made mmnemonic are still safe, right? ðŸ¤
strong passphrase needs to be pretty freaking strong if you didn't use at least 38 dice rolls.
maybe the mnemonics are safe, but you really don't have a good way of ensuring that you have sufficient entropy if you're not using measurable entropy (multiple random dice rolls, or plucking actually random words from a bucket of the valid seed words).
fortunately, it looks like the dice roll code is not totally compromized.
I don't think that's true. Bruteforcing preimages of passphrases should be per char which grows fast
https://xkcd.com/936/
we should be more specific when we say "strong".
what I'm getting at is: aardvarkaardvarkaardvarkaardvarkaardvark is a lot of characters, but if the mechanism for guessing words is plucking them alphabetically, you're not gonna be in a good situation
Rainbowtable attacks are mooooving the goaaalpost
I don't want to misrepresent my level of understanding here, so I'll ask outright:
I thought rainbow tables were pre-constructed. Are you informing me that iterating words from the dictionary to create combinations of common words is a 'rainbow table' ?