Given Blockstream’s response, I don’t think they deserve any...

Cyph3rp9nk

npub1lnms53w04qt742qnhxag5d6awy7nz6055flnmjkr6jg39hm86dlq7arrnt

hex

89f2402be73e03643c2ea0cb315fc6909fb7eb20eaf4c074c25f1ec2fb76e9d0

nevent

nevent1qqsgnujq90nnuqmy8sh2pje3tlrfp8ahavsw4axqwnp978kzldmwn5qprpmhxue69uhhyetvv9ujuem4d36kwatvw5hx6mm9qgs0eac2gh86s9l24qfmnw52xawhz0f3d862yleaetpafygjmanaxlshv8prx

Kind-1 (TextNote)

2026-09-02T13:52:22Z

Given Blockstream’s response, I don’t think they deserve any further benefit of the doubt on this issue.

Classic Jade devices running non-radio firmware version 1.0.40 or earlier have a legitimate trust issue regarding the entropy produced by the hardware RNG, because the way it was being sampled appears to fall outside the conditions recommended by the manufacturer, Espressif, for obtaining maximum entropy from the SAR ADC source.

It is true that Jade later mixes multiple entropy sources into its internal state, but without a published lower bound or measurement of the min-entropy contributed by those sources, there is no public evidence demonstrating that the resulting BIP39 entropy necessarily reaches 128 bits.

What has surprised me most is Blockstream’s apparent lack of awareness of these ESP32-specific RNG constraints, despite relying on that hardware as a core part of the device’s entropy-generation process.

原始 JSON

{
  "kind": 1,
  "id": "89f2402be73e03643c2ea0cb315fc6909fb7eb20eaf4c074c25f1ec2fb76e9d0",
  "pubkey": "fcf70a45cfa817eaa813b9ba8a375d713d3169f4a27f3dcac3d49112df67d37e",
  "created_at": 1788357142,
  "tags": [],
  "content": "Given Blockstream’s response, I don’t think they deserve any further benefit of the doubt on this issue.\n\nClassic Jade devices running non-radio firmware version 1.0.40 or earlier have a legitimate trust issue regarding the entropy produced by the hardware RNG, because the way it was being sampled appears to fall outside the conditions recommended by the manufacturer, Espressif, for obtaining maximum entropy from the SAR ADC source.\n\nIt is true that Jade later mixes multiple entropy sources into its internal state, but without a published lower bound or measurement of the min-entropy contributed by those sources, there is no public evidence demonstrating that the resulting BIP39 entropy necessarily reaches 128 bits.\n\nWhat has surprised me most is Blockstream’s apparent lack of awareness of these ESP32-specific RNG constraints, despite relying on that hardware as a core part of the device’s entropy-generation process.",
  "sig": "110f728b5f7f951f0b90941c1b45c5acb4b99730f8297d89733fdae2662785d6c6d1d5b4d7b1f940911397092feef9acdb3ce05fa3613fb3ac1e13f222382371"
}