808bits

Every MPC wallet pays a price set by one line of algebra. A tour of Lindell17, GG18/GG20, CGGMP, DKLs and FROST - who implements them, who audited what, which ones broke - with benchmarks from one machine.

Three keyholders run a real 2-of-3 distributed key generation and FROST signing session, live on this page: every protocol message shown byte for byte, plus a sabotage lab. Zig compiled to WebAssembly, no server, no dealer.

FIPS-validated modules shipped ROCA, EUCLEAK, Dual_EC_DRBG, and a YubiKey flaw caused by the FIPS self-tests themselves. What the certificate actually attests, what FIPS mode costs in performance, why it breaks Bitcoin tooling like BIP32, and where audito

A five-year firmware bug left Coldcard seeds with 40-72 bits of entropy instead of 128, and $88M moved before most users heard about it. What survived, what didn