Damus
Open in Damus

Recent Notes

adevries17 profile picture
In regards to entropy and offline generation, I think people are missing the point. You want more entropy data points and to get such things, most operating systems get that from network, disk, memory, all kinds of different things that are changing. If you have a tails system that's completely air-gapped, you're not going to have all the network data points that you can pull from to add to the entropy pool. To get the most randomness, you want a very high entropy pool and the Linux entropy pool is taking all sorts of different inputs, so the more inputs you can add, the higher your entropy, the better your random number generator is. So when I generated more dice rolls, I was using my main online system with browser open as much entropy as you can possibly get based off of network activity, and all that. Yes, sure, if somebody pwned that computer already, they could see the numbers that were generated, but that still is much higher entropy than if you have an offline system that you just booted up and you're already generating numbers off of.

https://fountain.fm/episode/mINbvSG83CfjIsCCRoAE

Fountain Boost Bot @fountainboostbot · 5d
2❤️1
Johnny · 5d
nostr:nprofile1qqsd2gu8wzduatm32c6upfgpveudp50ytvzlcdfwhjyu9552vstf38ctzhdw5 once the csprng has its 256 bits of seed it is computationally secure, and extra inputs after that do not buy more randomness. the dice are there to take the machine out of the trust model entirely.
COLDIRON OS · 4d
Worse than 'they can see the numbers': a pwned OS can swap the RNG itself — the Coldcard/libNgU case (1,778 BTC drained) was exactly that. A fresh offline boot still has CPU RDRAND plus your dice; air-gap means the attacker can't reach the machine at all.
adevries17 profile picture
I'm also rethinking my cold storage situation. I wrote a little rust program to roll a virtual dice using the rand crate, then used that running on my desktop which at that time had been online and doing a bunch of things in the background for a while to get some random dice rolls. Going to check out Bitkey and also maybe an ESP32 based seedsigner

https://fountain.fm/episode/WVZstxZT2IeBlWExpgJl