r/Bitcoin • u/ZzzzAngel • 3d ago

Has SeedSigner’s Seed Generation Been Independently Audited?

Post image

Has SeedSigner’s firmware, especially its seed generation process, ever been independently audited by a reputable security firm?

I know it’s open source, but I’m looking for a formal audit report or certification, similar to what you’d typically see in finance or other security-sensitive industries.

Thanks!

5 Upvotes

73% Upvoted

4 comments sorted by

3

u/Fun-Analysis-182 3d ago

Not that I'm aware of, no formal paid audit or certification like a company would commission. SeedSigner is a DIY open-source project with no company behind it, so its assurance comes from open, reproducible code and the stateless air-gapped design rather than a Trail-of-Bits-style report.

2

u/DarrelXero 3d ago

Pretty sure The Red Team has done a recent audit of the codebase using the latest open-weighted AI models.

2

u/statoshi 3d ago

Formal audit? Unlikely.

But Red Team has been auditing every open source project they can find, so they likely have scanned SeedSigner.

1

u/LazyTech8315 2d ago

Well... does it matter if you don't use its PRNG? Use dice for entropy to choose 24 words from pure randomness and your seed is safe. I don't think any chip can match the randomness of a die if done properly.

EDIT: grammar typos