Code has been thoroughly audited over the last few days by many pros.
I encourage you to do your own verifications with tests, looking at the python tool Coinkite published for verifying the roles, and potentially trying the dice rolls with other manufacturers' devices.
Login to reply
Replies (1)
Thanks again. Unfortunately the TRNG + Dice method cannot be reproduced / verified in the same way that Dice Only can.
From CC website:
COLDCARD TRNGs Only: This method involves the most trust, as it is using the hardware of the COLDCARD to generate entropy (randomness) for your seed. This method is not reproducible, is low risk to users, and protects the user from any possible mistakes.
COLDCARD TRNGs + Dice: This method can be considered the middle ground as far as trust is concerned. It still uses the COLDCARD hardware to generate random data, but now adds in entropy that you can create via dice rolls. This method is not reproducible, and is low risk to users. Although not reproducible and involving some trust, it is minimized and users cannot produce worse entropy than using the COLDCARD's TRNGs only method.
Dice Only: This method can remove all trust in the COLDCARD's hardware, as all of your entropy is produced by your dice rolls. This method is fully reproducible using the Verifying Dice Roll Math document. However, if warnings are not heeded, it is possible to generate seeds that will be stolen immediately.
Still solid overall?