Can someone who knows please enlighten me (a non-expert)?
Are there any mission-critical basic functions of a cold storage signing device that absolutely require the use of RNG?
A signing nonce comes to mind; but, it's my understanding that deriving it deterministically with a hash of the transaction content (or something along those lines) instead of using an RNG is now considered best practice. Is this correct?
Are there any other absolutely necessary reasons for a signing device to use RNG. If not, since seed generation could instead be achieved reasonably safely, and *verifiably* with dice or coins, etc, doesn't that necessarily mean that signing devices that even offer an inherently unverifiable RNG seed generation option are subjecting unsuspecting users to an unnecessary risk?
Judge Hardcase
npub1k7…x7ehv
2026-08-04 00:04:48 UTC
Author Public Key
npub1k7v6uflqxu9js45e8ek53u2azefe6j49r7lna0da90zq7c9y6f0q8x7ehvSeen on
wss://relay.wisp.talkPublished at
2026-08-04 00:04:48 UTCEvent JSON
{
"id": "2bba577cfc1e15a6cfc930706bb7c5298964ef080e86031e888745e45751d0d2",
"pubkey": "b799ae27e0370b2856993e6d48f15d16539d4aa51fbf3ebdbd2bc40f60a4d25e",
"created_at": 1785801888,
"kind": 1,
"tags": [],
"content": "Can someone who knows please enlighten me (a non-expert)?\n\nAre there any mission-critical basic functions of a cold storage signing device that absolutely require the use of RNG?\n\nA signing nonce comes to mind; but, it's my understanding that deriving it deterministically with a hash of the transaction content (or something along those lines) instead of using an RNG is now considered best practice. Is this correct?\n\nAre there any other absolutely necessary reasons for a signing device to use RNG. If not, since seed generation could instead be achieved reasonably safely, and *verifiably* with dice or coins, etc, doesn't that necessarily mean that signing devices that even offer an inherently unverifiable RNG seed generation option are subjecting unsuspecting users to an unnecessary risk?",
"sig": "91152babda651b9a652f12aced70015ec9b6bdec23565f1e9049272e06d5b972648b97beceb3bdd499e128a45dee49591368a8b5edcb3b0f3c531d5208d89ad3"
}