Nostr Web Client

Just listening to #RHR and the dice roll feature from coldcard.

I rolled a d6 100x for my coldcardMk4 seed. Is this feature safe or not? @NVK

nostr:npub1guh5grefa7vkay4ps6udxg8lrqxg2kgr3qh9n4gduxut64nfxq0q9y6hjy and nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx didn't do a great job explaining the issue on #RHR. What you did is fine as I understand it. I think from what I saw on the bird app was that some people were using the automatic seed generation and then they thought they were adding entropy with dice rolls after the fact but were ending up with seeds with 1 dice roll of entropy and their funds would be stolen as soon as they were sent to the wallet.

I trust dice rolls more than the #Coldcard seed generation. The #SeedSigner has the same dice roll seed generation feature with the same algorithm so I enter my dice rolls into both at the same time to confirm that the Coldcard is using the correct seed (same one the SeedSigner generates). You might say I'm a bit paranoid!

Reply to this note

Please Login to reply.

Discussion

morningglow 1y ago

From what I remember when creating my seed words, the cold card generates a seed, and then you add 100 dice rolls to increase entropy. Does that sound right to you? Was awhile ago when I created it..

ODELL 1y ago

YOU ARE GOOD.

COLDCARD HAS TWO DICE MODES.

ONE USES COLDCARD ENTROPY AND THEN ADDS USER PROVIDED DICE RANDOMNESS ON TOP.

THE OTHER IS USER PROVIDED DICE ROLL ENTROPY ONLY. IF A USER DOES NOT BRING ENOUGH RANDOMNESS TO SEED GENERATION IN THIS MODE - RECOMMENDED TO PROVIDE GREATER THAN 100 GOOD DICE ROLLS - THEY GENERATE AN INSECURE SEED.

SORRY IF THIS WAS UNCLEAR ON RHR. WILL BE MORE CLEAR NEXT WEEK.

BitcoinLizard 1y ago

Well you did tell people not to use the dice roll feature which would keep them safe and that's the most important thing.

Basically if you don't understand what's happening with the advanced features don't use them, sound advice.