Disclosure: I'm a pleb with no technical background (software nor hardware), and I am not a cryptographer.
As far as I can tell, using dice input to generate a seed phrase on a ColdCard Q bypasses the coding failure that causes the low entropy seed phrase generation.
I tested this by rolling dice 100x independently, then inputing the results into the CCQ, the python script provided by CoinKite for the independent verification (I didn't trust this one as much), and https://iancoleman.io/bip39.
The CCQ produced the same HexString as the python script. The CCQ also produced the same seed phrase as iancoleman. I performed this test three times.
Am I correct in my understanding that the provided cross-verification means that if you use the CCQ to process 100 dice rolls then you have a seedphrase generated from the appropriate amount of entropy?
I believe
already confirmed dice generated keys were safe, but I thought it best to verify myself. I also wanted to provide other plebs a way they could check their own devices.
#ColdCard #MK3 #MK4 #MK5 #CCQ