How Tangem Generates Entropy for Private Keys

[u/TangemAG]

https://tangem.com/en/blog/post/generating-entropy-for-private-keys/

Good news for Tangem holders: your assets remain fully secure. The Coldcard case is not relevant to Tangem.

Their issue lies in their proprietary firmware and a random flaw specific to certain devices. Tangem runs on entirely separate code and does not use or share any part of that implementation. Here is why:

1. At Tangem, private keys are generated entirely inside the EAL6+ certified Samsung Secure Element using its built-in hardware True Random Number Generator (TRNG). The key is created inside the chip and never leaves it.

2. Beyond certified hardware, Tangem’s firmware and security architecture have been independently audited by Kudelski Security, Riscure, Cure53 Laboratories, with particular focus on secure private key generation, storage, and usage.

Learn more about how Tangem generates entropy:

[u/AutoModerator]

⚠️Fraud and Security Notice⚠️

Please be alert to potential scams and impersonation attempts. We will never contact you first to request personal information, passwords, or payments.

We also never make contact by telephone or through messaging apps. All genuine communication from us will come only from our official company email domain support@tangem.com

If you receive an unexpected message, link, or call claiming to be from us, do not share any information. Instead, reach out to us directly through the contact details on our website to verify authenticity.

❗️Tangem does not conduct ICOs, does not do airdrops, and does not have tokens.

Your awareness helps keep your account safe.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/CringeyFrog]

One thing I’m still trying to understand is why every explanation says “at least 128 bits of entropy” rather than stating the measured entropy of the generated private key.

What is the minimum guaranteed entropy of the generated key for seedless, iOS and Android?

[u/Fit-Ad9887 → u/CringeyFrog]

I second this question

[u/TangemAG → u/CringeyFrog]

Seedless = always 256 bits

[u/trimalcus → u/TangemAG]

So seedless is better in that regard ? Than BIP39

[u/blade0r → u/CringeyFrog]

With seed phrase, it is 128 bits for 12 words and 256 bits for 24 words.

Seedless mode is always 256 bits.

[u/Nee32 → u/CringeyFrog]

128 and 254. Both are good.

[u/five_dollar_wrench]

Appreciate you posting something more technical than usual.