The supposed "Provably Fair Shuffling Through Cryptography"
https://techblog.bitzino.com/2012-06-30-provably-fair-shuffling-through-cryptography.html leaves much to be desired to be called "Provably fair".
These are only a few reasons:
(1) Client_seed is not big enough (32 bits) to assure a fair statistical distribution. The server can try each possibility in advance...
(2) The server knows the shuffled deck (every card) BEFORE the user, so the server can abort the game (showing any strange error message) if the deck is too good for the user.
(3) Last but not least, the site is HTML5 only (no open source client application), so there is no way to know if the client-side javaScript code is actually verifying anything !!!
(4) Where is the "proof" for the "Provably Fair" algorithm?
The only way to implement secure card games on the Internet is by using Mental Poker protocols (crypto newbies, check it on Wikipedia). And it happens that I designed the fastest MP protocol so far... humbly
Best regards,
Sergio.
