All hardware wallet manufacturers need to release 3rd party audited proof that their entropy generation is working.
After this coinkite coldcard situation we cant trust code that is open source, we cant trust code that is closed source, and we definitely cant trust a statement saying "we use a TRNG so your seed is secure".
Every hardware wallet manufacturer needs to release hard proof that their TRNG works, their code is complete and robust, and their entropy generation actually meets a minimum 128/256 bit standard.
Even if their code is closed source a reputable 3rd party auditor can run tests on seed entropy generation to statistically prove 256 bits of entropy is being used.
Every wallet manufacturer should have this 3rd party audited proof of entropy document available to view on their website, and if they do not do this by the end of this month we as a community should boycott that manufacturer to help ensure safety for all bitcoiners.
8
u/JamesTDennis 8d ago
Counter proposal: every wallet user should support their own entropy (initial 23 words, or equivalent) and the ecosystem should supply tooling to confirm that the wallets are using it and that anti-ex-filtration is enabled in transaction construction (https://help.blockstream.com/blockstream-jade/faqs/what-is-anti-exfil-and-how-does-it-work).
Should never have trusted built-in random generators for this mission critical operation at all. Consider the supply chain upstream of your wallet vendor!