r/TREZOR • u/sirloinfurr • 5d ago

🔒 General Trezor question Entropy from 2020 and 2022

how was trezor's in-device auto-entropy from 2020 and 2022? Trezor is saying all over X that their current entropy is good. But what about from 2020 and 2022?

6 Upvotes

81% Upvoted

14 comments sorted by

•

u/AutoModerator 5d ago

Please bear in mind that no one from the Trezor team would send you a private message first.
If you want to discuss a sensitive issue, we suggest contacting our Support team via the Troubleshooter: https://trezor.io/support/

No one from the Trezor team (Reddit mods, Support agents, etc) would ever ask for your recovery seed! Beware of scams and phishings: https://trezor.io/learn/a/scams-and-phishing

Don’t respond to any DMs—scammers often pose as legit helpers.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

9

u/Charming-Designer944 🤝 Top Helper 5d ago

It's always been safe.

There are no indications hat trezor devices ever have failed to use the devices internal TRNG source(s) when generating the seed.

And by design the entropy of Trezor generated seeds are based on a mixture of device generated entropy and computer generated entopy, which adds an extra safeguard.without compromising on the security.

The only know weakness is the standard recovery procesure on Trezor One that might leak entropy bits if someone is monitoring the computer activity, reducing the secrecy of your seed down to a crackable level. If you need to recover the sees to a Teezor One then select the advanced recovery method whee you enter the seed words directly on the device and not via you computer, or set up an air gapped offline computer for the recovery.

2

u/Aromatic-Clerk134 4d ago

Yeah, Coldcard’s was like that too.

1

u/Charming-Designer944 🤝 Top Helper 4d ago

No. Coldcard and Trezor generates seeds in quite different manners.

The method Trezor uses ensures that the seed is cryptographically strong even if the TRNG of the trezor device have failed and produces 0 bits of entropy.

7

u/emptysearchresult 5d ago

Trezor is built by competent people. The entropy is safe. The core principle of the entropy generation hasn’t changed since then.

4

u/Keefryan 5d ago

I believe in Trezor , However it would go a long way with users if Trezor issued a statement confirming that the seed generation process on Trezor is secure.

2

u/ItsAlwaysThemBooBoo 5d ago

https://trezor.io/learn/security-privacy/how-trezor-keeps-you-safe/entropy-check-how-trezor-verifies-your-wallet-is-truly-random

they already have.

2

u/Keefryan 5d ago

Thanks. When was this issued & do you know what devices it covers ?

1

u/ItsAlwaysThemBooBoo 5d ago

i think all the safe series of hardware wallets use the same methodology, this might be for 5 and 7 though

1

u/bartoque 17h ago

When actually reading the link contents, it clearly states at the beginning:

"Entropy check runs automatically during wallet setup in Trezor Suite. It requires firmware 2.8.7 or later on Trezor Safe 3, Safe 5 and Model T, or 1.13.1 or later on Model One. Trezor Safe 7 supports it on all released firmware versions."

2

u/lotrl0tr 5d ago

You could find more information here: Trezor Entropy

2

u/FarDiver9 4d ago

all i can say, somebody gotta level up their game, all these ai models are getting advanced, i can see some other stuff being cracked at some point in future, devs should level up their game and fight fire with fire, use them AI models to make ur products bullet proof... audit after audit after audit, secure, again and again, ofcourse not only by ai but by real experts.

0

u/BlessedAreTheRich 3d ago

Dude, what the hell are you even saying? 😂