drgo on nostr

Open in Damus

Frostsnap · 14w

Dice rolling only begins to start making sense when you: (1) Verify entropy → seedphrase on an independent device, to check the device actually used it. (2) Verify seedphrase → root private key ...

Quantoshi.xyz @drgo 1793675285

Nonces are a weakness of the frost system, Bitcoin uses deterministic nonces (at least for wsh, not sure about tr).

1

Frostsnap · 1w

Deterministic nonces only help if you check them, and checking means signing the same transaction again on a second device and comparing the signatures. RFC 6979 derives the nonce from your private key, so that second device now learns your entire seedphrase. That puts your secret on more devices, ...