Anyone want to criticize this dice roll method from Blockstream? #bitcoin #asknostr
https://help.blockstream.com/blockstream-jade/add-more-security-functionality/create-a-recovery-phrase-using-dice
@TaxSlave the xor is what answers most of the criticism. your dice get combined with the device's own entropy, so only one of the two has to be good, and a weak rng cannot quietly water it down. the real failure mode is rolling too few times, 50 d6 rolls for 128 bits and 99 for 256.