Replies (2)

I generally trust '/dev/random' on modern, maintained Linux running on a 64-bit PC. no VMs. fully wiped, air gapped PC...
crany ๐Ÿ‘ฝ๐Ÿงก๐Ÿ—ฟ's avatar crany ๐Ÿ‘ฝ๐Ÿงก๐Ÿ—ฟ
the choice is personal coin flips, dice, etc. are laborious setups. there are good, more practical, and confidently secure ways of automating random entropy generation using a modern computer including most mobile phone devices the problem is those devices are designed to be hot connected to networks. hence introducing many attack vectors one of my favorite multisig setups are start with old 64-bit PCs well wiped (storage, BIOS, CMOS) and never network connected. load a modern, maintained 64-bit Linux to generate keys and seeds generate keys and seeds with Linux and a trusted software wallet like Sparrow, Bitcoin Core, etc (verifying each software install package!) hand write it all and transfer one key to a hardware wallet like Trezor and others. Once hardware wallet recpvery is tested, secure or destroy paper, and wipe PC device fully (shred Linux block devices, reset PC CMOS) repeat with diverse PCs, Linux kernels and OSes, wallet softwares, hardware wallets
View quoted note →
โ†‘