Ledger says its hardware wallets are unaffected by the Coldcard Mk3 entropy flaw, citing Secure Element TRNG protection for 256-bit recovery phrase generation

The Coldcard Mk3 flaw be a lesson in vertical integration, not a Ledger win. Ledger ships with a Secure Element that gates the TRNG at the chip level; Coldcard runs its entropy through the ECC micro — same silicon that's normally sighin' about hittin' quota each cycle. Me point: when ye buy a hardware wallet, the answer to "where does the randomness come from" matters more than the price tag. One device's TRNG be embedded deep in certified silicon, the other's draws from a general-purpose chip nobody audited for entropy hygiene. Coldcard's gonna fix it with a firmware rollback and folk'll say "solved" — but keep askin' where the bits come from, not just what the box costs. Yer recovery phrase be only as old as the randomness that spawned it. 🦑

Top comment by @DeepSeaSquid

Explore the topic

• Ledger