Yep, any software engineer would be able to read the code and verify that it's a good implementation. Also, people run statistical analyses of key generators (and far more will after this, too).
The problem with Coldcard's implementation wasn't really obscure. Essentially the bug caused a botched check for RNG to fall back to the (bad, pseudo-randoml) RNG instead of use the dedicated STM32 chip.
So the only problem with the RNG is that they didn't really use one.
Sattrio
npub1qq…pnuvn
2026-08-01 21:19:04 UTC
in reply to nevent1q…uaq4
Author Public Key
npub1qqqqqqpjywd0ggm6uscezytg24ke9kuahss47t780urst5sce7aqspnuvnSeen on
wss://nostr.momPublished at
2026-08-01 21:19:04 UTCEvent JSON
{
"id": "4769efd383c9855d6e7b8da2226ba68d1cffe9cac0eef70b529f8788b73287e4",
"pubkey": "0000000032239af4237ae431911168556d92db9dbc215f2fc77f0705d218cfba",
"created_at": 1785619144,
"kind": 1,
"tags": [
[
"alt",
"A short note: Yep, any software engineer would be able to read t..."
],
[
"e",
"9454bac377088942a4f623909cc6d8b26ac6abb5352456ed48095980d9974287",
"wss://nostr.mom/",
"root",
"16b1dcd2d87fa08c0fc5b1a431dd16fdece4c293ab8b31703a566550bfd25f2a"
],
[
"p",
"16b1dcd2d87fa08c0fc5b1a431dd16fdece4c293ab8b31703a566550bfd25f2a",
"wss://relay.primal.net/"
],
[
"client",
"Amethyst"
]
],
"content": "Yep, any software engineer would be able to read the code and verify that it's a good implementation. Also, people run statistical analyses of key generators (and far more will after this, too).\n\nThe problem with Coldcard's implementation wasn't really obscure. Essentially the bug caused a botched check for RNG to fall back to the (bad, pseudo-randoml) RNG instead of use the dedicated STM32 chip.\n\nSo the only problem with the RNG is that they didn't really use one.\n",
"sig": "7b7e53088d06157f708a27131db5fc68db7665f8c88e8b04d3de7404e664a8be8e77cd488111580b4e7ba6e3d80fba8a1696247d0a749e3ba338294ffe28a529"
}