Join Nostr
2026-08-06 16:49:27 UTC
in reply to

CptKook on Nostr: There was no weak entropy fallback. Stop giving air time to air head feds. The weak ...

There was no weak entropy fallback. Stop giving air time to air head feds. The weak PRNG (Yasmarang) wasn’t Coinkite’s fallback. It’s MicroPython’s built-in general-purpose RNG — introduced upstream in May 2018, and it didn’t enter Coldcard seed generation until the libNgU migration in March 2021. Every language runtime ships something like this for ordinary randomness (shuffling, jitter, non-security stuff), and that’s fine on its own. Coinkite’s actual design intent was the opposite of a fallback: route seed generation exclusively through their hardware TRNG and never touch the software one. Setting MICROPY_HW_ENABLE_RNG=0 was them trying to switch the software path off. The bug is that the switch didn’t take, and the symbol quietly resolved to the runtime’s default instead. So the “fallback” was collateral inheritance from their platform, activated by a link-time mistake, not a corner someone chose to cut in the seed logic.