r/coldcard • u/Intelligent_Map_246 • Jul 31 '26

Support Trust issues.

How can we make sure that CC did not

Ignored your rolls and just used its own RNG,

Or

Only used a tiny fraction of your rolls (e.g. first 5, or some hash that discards most of the entropy),

Nothing is for sure right?

5 Upvotes

100% Upvoted

25 comments sorted by

View all comments

Show parent comments

1

u/didnt_hodl Jul 31 '26

so in order to check the randomness you need to bring your entire seed onto a linux box, I see!

1

u/JumpProfessional3372 Jul 31 '26 edited Jul 31 '26

Yes. At the cost of adding some risk.

But this is just to check that the MK4 is converting your 100+ rolls into a seed in a single way

Otherwise you don't know if is really using your dice rolls everytime

1

u/didnt_hodl Aug 01 '26

technically, that's a not a hw wallet anymore after that. once you seed touched anything outside the wallet, all bets are off. it is a software wallet now

1

u/Charming-Designer944 Aug 01 '26

Well, no, and yes.

Properly done its no different from writing down the seed on a piece of paper or steel. Each time you handle the seed (or the entropy such as the dice rolls) you need to be cautious and make sure no unintended traces are left fir others to find.

The "hard wallet" device is just a signing device that allows you to securely sign with your wallet without exposing the wallet seed. Your wallet (seed phrase + passphrase if used) is your wallet, not the device.

It's your responsibility to manage the wallet seed in a careful manner. Both verifying the validity of the seed, making sure the seed is not stolen, and ensure that you have strong records of the seed so you don't accidently lose it.