extreme paranoia with hardware wallets
1341 sats \ 7 comments \ @lloyddunne 25 Oct 2023 bitcoin
I'm a big fan of hardware wallets, mainly used the coldcard and it truly is amazing.
But one thing that potentially kept me up at night was the trust of seed generation. I know you can do dice rolls and all that but you are still trusting that it is a genuine random seed that is being generated.
should we normalise an offline seed generation process, with something like borderwallets.com along with either a python code or seed tool - bitcoiner.guide/seed for checksum and verifying?
i think its a rewarding process to follow as gives you lots of information and you know that you have picked the seed in a randomized way.
write
preview
related posts
46 sats \ 0 replies \ @quark 25 Oct 2023
I think dice rolls are pretty good. Put them in a box and move and spin the box like crazy for 1 week. Then you have a random number 😃
reply
20 sats \ 2 replies \ @sime 25 Oct 2023
In cryptography (the original 'crypto'), it is said: don't roll your own cryptography.
We should also normalise 'don't roll your own dice': https://crypto.stackexchange.com/a/87982
reply
10 sats \ 0 replies \ @TwoLargePizzas 26 Oct 2023
That Man vs Machine game is actually kinda fun. I did lose against the machine but once I understood what was going on it wasn't that hard. Here's my score.
Man       425	44.32	-
Machine   534	55.68
To be honest I don't think this game is actually proving much. If anything it seems like you need to be less random to win.
reply
0 sats \ 0 replies \ @sime 25 Oct 2023
We have dedicated hardware that solves this because humans are useless, without lifting a finger: https://www.st.com/resource/en/application_note/dm00073853-stm32-microcontroller-random-number-generation-validation-using-the-nist-statistical-test-suite-stmicroelectronics.pdf
reply
20 sats \ 1 reply \ @CruncherDefi 26 Oct 2023
With coldcard you can verify that device used the provided dice-roll seed. They have python script that can reproduce hardware derivation on you PC via python script.
reply
0 sats \ 0 replies \ @lloyddunne OP 26 Oct 2023
yes again, i love the coldcard! I think border wallets offers a great way to generate offline seeds and have it so that you can leave bits of paper laying around and not be too worried!
ofc should also keep steel backup!
reply
100 sats \ 0 replies \ @DiracDelta 25 Oct 2023
That's why I made this: https://21baller.com/
Totally trustless seed generation
Check back in a week or so and we should have our btcpay server back up
reply