Quite a few people suggesting/using dice to mitigate the Coldcard vulnerability.
Note that common dice are not designed to be cryptographically secure.
If you are going to do this, you probably shou...
And dice entropy math is hard.
Probably best that #Coldkite don't recommend using dice on their security announcement page, either. Any idea how they do their dice math?
AI list of dice fails:
2015 | Ian Coleman BIP39 | Aggregation method mapped Base 6 to Base 2 via raw integer string, creating subtle bit bias
2017 | Coldcard Dice Roll | Allowed users to input fewer than 99 rolls, generating dangerously low entropy seed phrases
2019 | Standard Plastic Dice| Non-precision consumer dice showed statistical bias towards 1 and 6 due to engraved weight loss
2020 | Base-6 Modulo Bias | Naive mod 6-to-2 conversions left upper bits unevenly distributed, shrinking effective keyspace
2021 | Pre-SHA256 Truncation| Early SeedSigner tools used unhashed dice strings, leading to cross-device seed mismatches
2023 | Human "Random" Input | Users manually picking "random" dice numbers collapsed keyspaces into predictable human patterns
Probably best that #Coldkite don't recommend using dice on their security announcement page, either. Any idea how they do their dice math?
AI list of dice fails:
2015 | Ian Coleman BIP39 | Aggregation method mapped Base 6 to Base 2 via raw integer string, creating subtle bit bias
2017 | Coldcard Dice Roll | Allowed users to input fewer than 99 rolls, generating dangerously low entropy seed phrases
2019 | Standard Plastic Dice| Non-precision consumer dice showed statistical bias towards 1 and 6 due to engraved weight loss
2020 | Base-6 Modulo Bias | Naive mod 6-to-2 conversions left upper bits unevenly distributed, shrinking effective keyspace
2021 | Pre-SHA256 Truncation| Early SeedSigner tools used unhashed dice strings, leading to cross-device seed mismatches
2023 | Human "Random" Input | Users manually picking "random" dice numbers collapsed keyspaces into predictable human patterns