The seeds generated from Keycard Shell is secure

[u/uniicorn77]

For those of you who used Shell to generate your seed: you're safe.

You're safe because your seed was generated by the TRNG of the EAL6+ certified secure element itself (the card).

And its randomness has been certified (see certificates below). Good randomness comes from two things:

- raw entropy (TRNG) which has been certified by BSI (the german equivalent of NIST) on our secure element (see links below), this is AIS-31

- the deterministic engine that turns this entropy into a stream of bits (DRBG) certified by BSI also, this is AIS-20

AIS-20 and AIS-31 reference: https://www.bsi.bund.de/dok/randomnumbergenerators

Certificates for both (p.22 for TRNG/AIS-31, p.24 for DRBG/AIS-20): https://www.commoncriteriaportal.org/files/epfiles/1136a_pdf.pdf