\n\nThis application guides you through verifying that your COLDCARD correctly derives seeds and addresses from dice rolls.\n\n> NEW: If you don't need step by step instructions on how to use your COLDCARD, it's probably much easier to use the\n> [web version](https://andreashuber69.github.io/verify-coldcard-dice-seed) of this application.\n\nCAUTION: The very point of a COLDCARD is that the seed (usually expressed as a 12 word mnemonic) of a real wallet\n**never** appears on any other device. You should therefore only use this application to verify the seed and address\nderivation of your COLDCARD. Once you are convinced that your COLDCARD works correctly, you should then generate the\nseed of your real wallet on your COLDCARD only. Since the COLDCARD electronics has no way of knowing whether you're\nverifying seed derivation or generating a real wallet, you can be reasonably sure that your real wallet was indeed\nderived from the dice entropy you entered.\n\n## Prerequisites\n\nThis application is based on Node.js. You either need to have [Node.js](https://nodejs.org/en/download/) on your system,\n**or** run it in a [Docker](https://docker.com) container, see below for details.\n\n## Usage\n\n1. Open a command line window (i.e. CMD on Windows, Terminal on Linux).\n2. Enter one of the following commands (see [Prerequisites](#prerequisites) for more information):\n\n - Node.js is available:\n\n ``` bash\n npx verify-coldcard-dice-seed@latest\n ```\n\n (if the above gives you an error, please enter `node -v` and check that your version is >=20.11)\n\n - Docker is available:\n\n ``` bash\n docker run -it --rm node:lts-alpine npx verify-coldcard-dice-seed@latest\n ```\n\n3. If necessary, press the Enter key to acknowledge that the package needs to be installed.\n\n4. Follow the instructions in the command line window.\n\n5. Optional: The application with all its dependencies occupies roughly 5MB on your hard drive. To reclaim that space,\n you can delete the npx cache (the following commands assume that you did not change the default locations):\n - Linux (& probably MacOS):\n\n ``` bash\n rm -rf ~/.npm/_npx\n ```\n\n - Windows:\n Two locations seem to be used (possibly depending on the npx version). The following command attempts to delete\n both. If just one was used on your system, you might see a `The system cannot find the file specified` message:\n\n ``` bash\n rmdir /q /s \"%LocalAppData%\\npm-cache\\_npx\" \"%AppData%\\npm-cache\\_npx\"\n ```\n\n## Motivation\n\n### Hardware Wallet Security\n\nDue to a multitude of measures, hardware wallets are much more secure than any software wallet on a general purpose\ndevice (e.g. laptop, tablet, phone) could ever be. However, HW wallets usually fail to provide an easy way to verify\nwhether they function as advertised. More specifically, hardware wallets can only provide the purported security, if at\nleast the following conditions are satisfied:\n\n1. The seed of the hardware wallet is verifiably derived from truly random entropy.\n2. Addresses are reproducibly generated from the seed.\n\n### Why You Should Verify the Seed and Address Derivation of your HW Wallet\n\nThe first point above is often overlooked and most users simply trust that the electronically generated entropy used to\nderive the seed is truly random. Here are two reasons why such trust is misplaced:\n\n- Most HW wallets use a hardware random number generator (HW RNG) as a source of entropy. HW RNGs are often used in\n security-critical applications (encrypted communication, digital signing, etc.). Companies mass-producing such\n hardware are thus prime targets for intelligence agency \"nudging\" or even downright infiltration.\n- The HW wallet you ordered could have been interdicted and exchanged on its way to you. The one you got looks and\n works exactly like the original but is designed to steal your funds. It does so by only using say 30 bits of entropy\n and replacing the others with bits the attacker can calculate from the 30 bits. The seed words thus generated **look**\n random to you and would probably pass every [randomness test](https://en.wikipedia.org/wiki/Statistical_randomness)\n but the attacker can easily gain control over your funds by regularly checking the billion or so wallets that the 30\n random bits represent.\n\nTherefore, if you want to be sure that your seed is derived from truly random entropy, your wallet must provide the\nfollowing features:\n\n- Allow for the external supply of entropy\n- Reproducibly generate the seed and addresses from the supplied entropy\n\nThe [COLDCARD](https://coldcardwallet.com) hardware wallet provides both features, as it allows the use of dice to\ngenerate the entropy and documents how the seed is then derived from the entropy. As we've seen above, using dice rolls\nonly makes sense when you can verify that your COLDCARD indeed factors in all rolls into the entropy. This is why the\nmanufacturer [provides instructions](https://coldcardwallet.com/docs/verifying-dice-roll-math)\non how to verify dice seed derivation with a Python script. This application does the same but goes one step further: It\nalso allows you to verify the receive addresses derived from the seed. This covers the scenario where a malicious\nCOLDCARD copy correctly derives the seed but then generates addresses from a different seed, only known to the attacker.\n\n## Sample Output\n\n``` shell_session cSpell:disable\n$ npx verify-coldcard-dice-seed@latest\nNeed to install the following packages:\n verify-coldcard-dice-seed@1.0.35\nOk to proceed? (y) y\n*** Verify COLDCARD Dice Seed v1.0.35 ***\n(tested with COLDCARD Mk4 firmware v5.4.0)\n\nThis application guides you through verifying that your COLDCARD\ncorrectly derives seeds and addresses from dice rolls.\n\nCAUTION: The very point of a COLDCARD is that the seed of a real wallet\n*never* appears on any other device. You should therefore only use this\napplication to verify the seed and address derivation of your COLDCARD.\nOnce you are convinced that your COLDCARD works correctly, you should\nthen generate the seed of your real wallet on your COLDCARD only.\n\nGenerate 24 instead of the standard 12 words [y, N]? \n\nLog into your COLDCARD, select 'New Seed Words', 'Advanced',\n'12 Word Dice Roll'.\nPress any key to continue or CTRL-C to abort: \n\nTo perform a realistic test you should enter exactly as many dice rolls\nas you will enter for your real wallet. 50 or more rolls are REQUIRED.\nRoll the dice and enter the value on your COLDCARD and here.\n\n50 rolls\nee72ae915a4e6ea7ccbeb8e5e5eecef29a1d0d90f053183726a424b6d3b07325\nPress 1-6 for each roll to mix in, ENTER to finish or CTRL-C to abort.\n\nPress the OK button on your COLDCARD.\nPress any key to continue or CTRL-C to abort: \n\nCompare these words to the ones calculated by your COLDCARD:\n01: unveil\n02: nice\n03: picture\n04: region\n05: tragic\n06: fault\n07: cream\n08: strike\n09: tourist\n10: control\n11: recipe\n12: tourist\n\nPress any key to continue or CTRL-C to abort: \n\nPress the OK button on your COLDCARD, answer the test questions and\npress OK again.\nPress any key to continue or CTRL-C to abort: \n\nWallet passphrase (press Return for none): \n\nSelect 'Address Explorer' and press the 4 button on your COLDCARD.\nPress any key to continue or CTRL-C to abort: \n\nSelect 'bc1q40-cgx54e' on your COLDCARD.\nPress any key to continue or CTRL-C to abort: \n\nYou can now verify as many addresses as you like and stop whenever\nyou're comfortable.\nAddresses 0..9:\n\nm/84'/0'/0'/0/0 => bc1q40jg305efx4r2h9nmp7zr25supg58vpzcgx54e\nm/84'/0'/0'/0/1 => bc1qvzupcg5h8a50ys3jmz7c6m5kys2pjw2d504zwl\nm/84'/0'/0'/0/2 => bc1q4wqeln27nquhxu7ttt5w2lcyfantg5xchrfdkt\nm/84'/0'/0'/0/3 => bc1quy7f7ecjptkllq67g3fqzalskvrs6jhzrex3jp\nm/84'/0'/0'/0/4 => bc1q2m7h929x890ueqj7kyd5069wr9re5fsl3ru0lk\nm/84'/0'/0'/0/5 => bc1qgkmzsaq49l2vfacvn6vw0y9884y3f79gmq5upv\nm/84'/0'/0'/0/6 => bc1qqyx6v85d0epv2p72wtx2ue490auk9n5e6gd9vr\nm/84'/0'/0'/0/7 => bc1qwytmgyccuk7j2dm7eqwdm7agyjfzykzru5vytu\nm/84'/0'/0'/0/8 => bc1qfys95c5ng2006e9dl7xmg0k25nv0jcs9n7zyyg\nm/84'/0'/0'/0/9 => bc1qjkkfzctymaashfjj5qsp0z6wqkdq2ujg9dgg77\n\nPress p for new passphrase, CTRL-C to stop or any other key to continue: \n\nPress the 9 button on your COLDCARD.\nAddresses 10..19:\n\nm/84'/0'/0'/0/10 => bc1q69nkp8qy536q5az9cf3v6wer4sd7fpsr8z353d\nm/84'/0'/0'/0/11 => bc1q4mjk7v8zztrv4v7y8r9e274h6020cs6jvunlr8\nm/84'/0'/0'/0/12 => bc1q5l9nwh08skpwzfyqxhulx7fr8dp34pgj4893re\nm/84'/0'/0'/0/13 => bc1qlxzvyy0hjyksn4fun3rh842ujtxyesuv922lr0\nm/84'/0'/0'/0/14 => bc1q0xvek0j04p2552xex30jxu9z8gqmssef3qexy7\nm/84'/0'/0'/0/15 => bc1qkv4d3tfk09gh9rdp3tvj2jlv4kvnw5rdh5fv49\nm/84'/0'/0'/0/16 => bc1qk75kp9wkmra02s707eshtxfdfz2yd4dk66eggl\nm/84'/0'/0'/0/17 => bc1qh374unl8uk6xxv2za9tjs2xxmxkjw8lns3q46x\nm/84'/0'/0'/0/18 => bc1qk2ghr7wwn9p7xy3mupezktq7kss5a6tr8k9hjs\nm/84'/0'/0'/0/19 => bc1qtnn3s0xvflu7vzekffe2suy7a9sh4jamgffa79\n\nPress p for new passphrase, CTRL-C to stop or any other key to continue: \n\nOn your COLDCARD, press the X button twice.\nWallet passphrase (press Return for none): hello\n\nOn your COLDCARD, select 'Passphrase', press the OK button and enter the\nsame passphrase. Select 'APPLY', and press the OK button.\nPress any key to continue or CTRL-C to abort: \n\nSelect 'Address Explorer' and press the 4 button on your COLDCARD.\nPress any key to continue or CTRL-C to abort: \n\nSelect 'bc1qgy-e3n084' on your COLDCARD.\nPress any key to continue or CTRL-C to abort: \n\nYou can now verify as many addresses as you like and stop whenever\nyou're comfortable.\nAddresses 0..9:\n\nm/84'/0'/0'/0/0 => bc1qgydfzfvp95lctvf22y3lpd00hrerjck9e3n084\nm/84'/0'/0'/0/1 => bc1qp6n25uyds6u8888fs6lkxdfxwv765gpml343v6\nm/84'/0'/0'/0/2 => bc1qumpek4k8784qp3mtkx8wtftw53t6up2laj0aqq\nm/84'/0'/0'/0/3 => bc1qnuavy9y4f8n9t3u4m2yujlql2vnq22ax4grl8r\nm/84'/0'/0'/0/4 => bc1qawmtu24vq6axv4zdvxuknly035gu2w7z6u38xu\nm/84'/0'/0'/0/5 => bc1qjfps2jts2klcad0vtlpq3wqmanxpxqkm73vxu4\nm/84'/0'/0'/0/6 => bc1q8a8cagucue973srtepflfv7krv8dt2el0hn66x\nm/84'/0'/0'/0/7 => bc1qr4ktljx86r79nd3jhqzyt4264mqn6z2pxwham5\nm/84'/0'/0'/0/8 => bc1qczqtjlp6sgc0z2hkva9mqdap67p97t93900xk2\nm/84'/0'/0'/0/9 => bc1q0azumqrfn8290f8535rhw95yqr5g74quh443kn\n\nPress p for new passphrase, CTRL-C to stop or any other key to continue: \n\nCAUTION: If you've set up your COLDCARD with a seed please clear it now\nby first going back to the main menu (press the X button as many times\nas necessary) and then selecting 'Advanced/Tools', 'Danger Zone',\n'Seed Functions', 'Destroy Seed'.\n```\n","readmeFilename":"README.md"}
![\"NPM](\"https://img.shields.io/npm/v/verify-coldcard-dice-seed\")
\n \n \n ![\"Release](\"https://img.shields.io/github/release-date/andreashuber69/verify-coldcard-dice-seed.svg\")
\n \n \n ![\"CI\"](\"https://github.com/andreashuber69/verify-coldcard-dice-seed/actions/workflows/ci.yml/badge.svg\"){kind=icon}
\n \n \n ![\"Issues\"](\"https://img.shields.io/github/issues-raw/andreashuber69/verify-coldcard-dice-seed.svg\")
\n \n \n ![\"Coverage\"](\"https://coveralls.io/repos/github/andreashuber69/verify-coldcard-dice-seed/badge.svg?branch=develop\"){kind=icon}
\n \n \n ![\"License\"](\"https://img.shields.io/github/license/andreashuber69/verify-coldcard-dice-seed.svg\")
\n \n