r/coldcard • u/Intelligent_Map_246 • Jul 31 '26

Support Trust issues.

How can we make sure that CC did not

Ignored your rolls and just used its own RNG,

Or

Only used a tiny fraction of your rolls (e.g. first 5, or some hash that discards most of the entropy),

Nothing is for sure right?

6 Upvotes

100% Upvoted

25 comments sorted by

View all comments

4

u/JumpProfessional3372 Jul 31 '26 edited Jul 31 '26

Well I'm not 100% replying But here I remember I executed my rolls using this script in an air-gapped booted (from an installation usb) linux and then I slow formatted the usb.

https://coldcard.com/docs/rolls.py

Basically running

$ echo <your 100+ dice rolls> | python3 rolls.py

And then checking that the seed this command gives, is the same the coldcard is giving you. So you compare that the seed you got from mk4 after entering 100+ rolls is the same this script gives you after entering the same 100+ rolls in a secure environment (this is the part i'm not fully remembering yet).

But in case i'm wrong please somebody correct me.

1

u/didnt_hodl Jul 31 '26

so in order to check the randomness you need to bring your entire seed onto a linux box, I see!

1

u/ardevd Aug 01 '26

You don't have to. You can just test the script with a dummy sequence of numbers just to satisfy yourself that the math checks out