sanket1729
@sanket1729
Bitcoin minimalist and rust enthusiast @Blockstream . Past: @IllinoisCS @iitbombay
gpg: 1C9B7614EC2B6993FBA9CFB8648FFB183E0870A2
1.1K Following 2.8K Followers
Coldcard bug in simple english. Code had a safety check to confirm the real randomness chip was in use. But the check only asked "does this setting exist?" But not "is it turned on?" It was off. So the wallet made keys from fake randomness, and fake randomness can be guessed.
Show more
The actual entropy is much less than 72 bits for mk4 onwards. 72 bit assumes security coming from several corelated timer fields. Not the same as 72 bits from crypto eng source.
My napkin math says it is almost 50 bits. Please move away from mk4 devices too.
Show more
