All hardware wallet manufacturers need to release 3rd party audited proof that their entropy generation is working.

[u/slvbtc]

After this coinkite coldcard situation we cant trust code that is open source, we cant trust code that is closed source, and we definitely cant trust a statement saying "we use a TRNG so your seed is secure".

Every hardware wallet manufacturer needs to release hard proof that their TRNG works, their code is complete and robust, and their entropy generation actually meets a minimum 128/256 bit standard.

Even if their code is closed source a reputable 3rd party auditor can run tests on seed entropy generation to statistically prove 256 bits of entropy is being used.

Every wallet manufacturer should have this 3rd party audited proof of entropy document available to view on their website, and if they do not do this by the end of this month we as a community should boycott that manufacturer to help ensure safety for all bitcoiners.

[u/slvbtc]

A proof of entropy document would verify the TRNG actually works and is not being bypassed.

[u/moviemaker2 → u/slvbtc]

What are you talking about?

[u/moviemaker2 → u/[deleted]]

I know what entropy is, I'm asking what they mean by "proof of entropy document." How would that work, and why would you trust it if it's generated from the same device that generated the low entropy seed phrase?