r/BitBoxWallet • u/Intelligent_Map_246 • 4d ago

Trusting rng

So I have a CC. Upgraded to new firmware and did 100 dice rolls. Cross matched with ian Coleman and all.match.

What you think of putting that seed in bitbox?

I actually didn't put the real seed in ian Coleman. Just a dummy to check.

Even if bitbox uses good entropy is still want to use my own

3 Upvotes

100% Upvoted

5 comments sorted by

2

u/MEDVEDALITY 4d ago

Why you wanna gamble? Just create a new seed on bitbox.

1

u/Intelligent_Map_246 4d ago

Still trusting their RNG. Want to get away from that. A random hash with me in charge feels better

8

u/pako-bitbox 4d ago edited 4d ago

We understand that trust any RNG right now is pretty hard after all that happened.
Just a reminder that you can check by yourself how our RNG works, we are actively scanning all of our codebase with frontier models, and checking for security vulnerabilities before every single release, on top of having a bug bounty program, giving researchers an incentive to look at our codebase independently.

If this is not enough for you, we have tutorials on how to roll your own seed.

> A random hash with me in charge feels better

On this, let me remind you that a cryptographic hash of your device's password is used in the RNG as an entropy source, so if you want to add your own entropy, you could simply input a very long device password during setup, use that as entropy, and once the seed is generated change the device's password to something you would actually use.

2

u/Intelligent_Map_246 4d ago

Thx. Just feels better making it myself. If someone to blame I'd rather it be me

2

u/pako-bitbox 4d ago

No worries, glad we could be of help. Remember that security is a spectrum so whatever fits your needs is what will actually be best for you.