Super Testnet
· 5d
Here's something that interests me about the coldcard bug: it had 2 random number generators. The "bad" one was seeded with data including keypresses, the timestamp, and the device id. I can understan...
As far as I understand:
The ColdCard has hardware random number generator. The bug caused the firmware to NOT use the HRNG (which provides quality entropy) and rather used the MicroPython's software RNG as a fallback. The software RNG was seeded with time and IDs because in an airgapped system, there's no way to get entropy from another sources like disk or network activity. The hardware RNG usually works by measuring noise in the hardware. The noise is unpredictable by physics so it's a great source of entropy by it self. It is not a deterministic mathematical function (PRNG/software RNG), so we don't need to seed it with anything.
♥1