strong passphrase needs to be pretty freaking strong if you didn't use at least 38 dice rolls.
maybe the mnemonics are safe, but you really don't have a good way of ensuring that you have sufficient entropy if you're not using measurable entropy (multiple random dice rolls, or plucking actually random words from a bucket of the valid seed words).
what I'm getting at is: aardvarkaardvarkaardvarkaardvarkaardvark is a lot of characters, but if the mechanism for guessing words is plucking them alphabetically, you're not gonna be in a good situation
I don't want to misrepresent my level of understanding here, so I'll ask outright:
I thought rainbow tables were pre-constructed. Are you informing me that iterating words from the dictionary to create combinations of common words is a 'rainbow table' ?
lol... it's incredibly similar to what Kimi wrote... which is funny. I looked at the session logs and Kimi 3 didn't web search to get Block's article until well after it had already generated the majority of its analysis
The way I understand it, strong passphrase and/or human made mmnemonic are still safe, right? ðŸ¤
strong passphrase needs to be pretty freaking strong if you didn't use at least 38 dice rolls.
maybe the mnemonics are safe, but you really don't have a good way of ensuring that you have sufficient entropy if you're not using measurable entropy (multiple random dice rolls, or plucking actually random words from a bucket of the valid seed words).
fortunately, it looks like the dice roll code is not totally compromized.
I don't think that's true. Bruteforcing preimages of passphrases should be per char which grows fast
https://xkcd.com/936/
we should be more specific when we say "strong".
what I'm getting at is: aardvarkaardvarkaardvarkaardvarkaardvark is a lot of characters, but if the mechanism for guessing words is plucking them alphabetically, you're not gonna be in a good situation
Rainbowtable attacks are mooooving the goaaalpost
I don't want to misrepresent my level of understanding here, so I'll ask outright:
I thought rainbow tables were pre-constructed. Are you informing me that iterating words from the dictionary to create combinations of common words is a 'rainbow table' ?
@Lobotomite shared block's very thorough analysis: https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware
lol... it's incredibly similar to what Kimi wrote... which is funny. I looked at the session logs and Kimi 3 didn't web search to get Block's article until well after it had already generated the majority of its analysis
distillation or determinism? i wonder if we'll ever know
turtles_all_the_way_down.gif
it's great, I was just reading it.