Join Nostr
2026-08-03 20:23:31 CEST
in reply to

semisol on Nostr: TL;DR if you did not SeedXOR seeds yourself, and instead used Coldcard to *split it* ...

TL;DR if you did not SeedXOR seeds yourself, and instead used Coldcard to *split it* with TRNG:
- All except 1 part is predictable
- The last part is enough by itself to get your original seed

This is because the Coldcard generates n-1 dummy seeds, and XORs them with your seed to get the last share. However all the dummy seeds are weak

So someone could just bruteforce all possible ones.

Your funds are not at risk of being stolen remotely by an attacker.

It just is that, if you did this way of share splitting, you should assume 1 share is enough to crack it.