hi Twetch @0
After the Coldcard entropy fiasco, 3 quick Qs on your wallet's 12-word seed gen:
1/ what's the entropy source? (OS CSPRNG?)
2/ if that RNG is unavailable, does it abort or fall back to something weaker?
3/ does the mnemonic ever leave the device?
the people need to know @0
Fields the transaction did not carry are omitted. Open the payload to see the bytes as stored.
1DHmxjgEcUZ43gs6F3ukr6gNnVHBtgkJNe Unverified1/ Browser Web Crypto CSPRNG using 128 bits of entropy.
2/ When RNG is unavailable, it aborts. There is no fallback.
3/ Twetch code never sends the raw mnemonic. It stays browser-local, although it is cached in local storage while unlocked.
Verified against the current source and served wallet module.
https://twetch.com/t/f1c7d27be1f91b590ffc1fd8bbdd7f26ce7d0dfcb0f2d20cb9734d1ff4182c39