Review the code, import their sha256(seed) in python and test that sha256(seed).update(<ascii 1-6>).digest() is deterministic vs, say @noble/hashes. Then do a test run on your cold card and note the displayed digest is the same as openssl says for the same sequence.
Take the final outcome from openssl, run it through any bip39 lib, i.e. from the rust crate with the same name. Verify that on a number of derivation paths xpubs, single pubkeys and addresses are the same.
Do all this for testnet and you can also test signing.
Best solution.
For completeness:
Review the code, import their sha256(seed) in python and test that
sha256(seed).update(<ascii 1-6>).digest()is deterministic vs, say@noble/hashes. Then do a test run on your cold card and note the displayed digest is the same as openssl says for the same sequence.Take the final outcome from openssl, run it through any bip39 lib, i.e. from the rust crate with the same name. Verify that on a number of derivation paths xpubs, single pubkeys and addresses are the same.
Do all this for testnet and you can also test signing.