An open-source Bitcoin seed generator has transformed radioactive decay occasions into 12-word and 24-word BIP39 restoration phrases utilizing an offline {hardware} system.
The Entropy32 Plus repository, revealed by developer Alexander Higgins in September 2026, incorporates the mission’s firmware, circuit-board designs, fabrication recordsdata and printable enclosure. Higgins describes the system as an experimental, instructional mission and warns customers to not belief it with substantial funds earlier than an unbiased evaluate.
Generally known as “The Universe Bifurcator,” the system takes pulses from a Geiger counter and measures the time between detected occasions. Its firmware converts comparisons between consecutive intervals into bits, collects a 512-bit enter pool and processes the info with SHA-256.
Entropy32 Plus then codecs a part of the ensuing hash as a normal BIP39 restoration phrase. The system operates with out Wi-Fi, Bluetooth or persistent seed storage, based on its revealed design.
A Bitcoin Seed Generator Is Utilizing Radioactive Decay for Entropy
An open-source mission referred to as Entropy32 Plus makes use of radioactive decay as a bodily entropy supply to generate Bitcoin BIP39 seed phrases. A Geiger counter captures decay occasions, whose timing is processed by means of… pic.twitter.com/ZhREDr89HQ
— Wu Blockchain (@WuBlockchain) September 13, 2026
Entropy32 Plus measures time between radiation occasions
Radioactive decay happens unpredictably on the degree of particular person atoms. Entropy32 Plus makes use of the timing of detected decay occasions as its bodily supply of randomness as an alternative of relying solely on a software-generated worth.
The present design accepts pulses by means of a 3.5-millimeter connection from a GQ Electronics GMC-320S Geiger counter. Its documentation says the counter can detect emissions from a radioactive supply or background radiation.
After receiving a pulse, an LM393 comparator converts the counter’s analog sign right into a digital enter. The customized circuit board passes that sign to an ATmega328P microcontroller.
The mission’s firmware information every accepted occasion utilizing a microsecond timer. It compares the most recent interval with the previous one, producing a one when the brand new interval is longer and a zero when it’s shorter.
Equal intervals are discarded. Measurements beneath 200 microseconds are rejected as attainable glitches, whereas accepted comparisons proceed till the system has collected 512 bits.
Higgins says this methodology makes use of pulse timing as a result of the exact arrival of a person decay occasion can’t be predicted. The developer doesn’t declare that each collected comparability contributes one full little bit of measured entropy.
SHA-256 situations the uncooked Bitcoin seed knowledge
As soon as the 512-bit pool is full, Entropy32 Plus processes all 64 bytes by means of its bundled SHA-256 code. The firmware makes use of the primary 16 bytes of the ensuing hash for a 12-word phrase or all 32 bytes for a 24-word phrase.
In accordance with the mission, hashing is meant to scale back seen patterns linked to detector useless time, count-rate adjustments or correlations between measurements. Hash conditioning can unfold out there entropy throughout an output, however it doesn’t show how a lot unpredictability was current within the unique knowledge.
The firmware features a startup check for SHA-256. It calculates the hash of “abc” and compares the outcome with a identified worth. The system stops earlier than amassing entropy if the reply is wrong.
Passing the self-test confirms that the implementation returns the anticipated outcome for that check vector. It doesn’t check the Geiger counter, assess pulse independence or measure the minimal entropy getting into the hash.
The mission collects twice as many comparability bits as the utmost 256-bit BIP39 enter it produces. Till the bodily supply undergoes formal measurement, the repository doesn’t set up how a lot usable entropy every comparability incorporates.
The system maps conditioned knowledge to BIP39 phrases
Following SHA-256 conditioning, the system applies the method outlined within the BIP39 specification. BIP39 converts an accredited entropy size right into a mnemonic sentence chosen from a standardized record of two,048 phrases.
For a 12-word phrase, Entropy32 Plus makes use of 128 bits of conditioned knowledge and calculates a four-bit checksum. The mixed 132 bits are divided into twelve 11-bit teams, with every group deciding on one phrase.
Its 24-word setting makes use of 256 bits and an eight-bit checksum. Dividing the ensuing 264-bit sequence produces 24 phrase indexes.
Crypto.information’ seed phrase information explains that restoration phrases maintain the knowledge wanted to revive pockets entry. Anybody who obtains the right phrases of their correct order can recreate the pockets’s keys.
A seed phrase shouldn’t be itself a group of independently generated phrases. As crypto.information defined in its information to private and non-private keys, fashionable Bitcoin wallets derive many personal keys from one grasp seed. Weak point within the unique entropy can subsequently have an effect on each deal with generated from it.
Entropy32 Plus compiles the whole BIP39 English record into its firmware. The wordlist occupies 13,117 bytes, or roughly 43% of the microcontroller’s flash capability, based on the repository.
With the OLED interface, SHA-256 implementation and assortment logic included, the compiled program makes use of 30,006 of the chip’s 30,720 out there bytes. Solely 714 bytes stay unused.
Offline design retains seeds away from related units
The revealed {hardware} recordsdata record no wi-fi communications {hardware}. Customers function the generator by means of two buttons and skim the phrase from a 0.91-inch OLED display screen.
Generated phrase indexes stay quickly within the microcontroller’s RAM. As soon as the consumer information the phrase, urgent each buttons opens a affirmation course of that overwrites the phrase array and restarts entropy assortment.
The firmware clears the unique pool after copying it for processing. Momentary hash, checksum and entropy buffers are overwritten after the BIP39 indexes have been calculated.
In accordance with the developer, the system doesn’t save a restoration phrase to persistent reminiscence. The open-source design doesn’t embrace a safe component or a mechanism that proves the put in firmware matches the general public code.
Bodily isolation removes a number of network-based assault routes, however it doesn’t confirm {that a} system was assembled accurately or loaded with trusted software program. A modified unit might show predetermined phrases or retain generated knowledge with out altering its outward look.
Crypto.information’ pockets safety information recommends maintaining restoration phrases away from telephones, cloud accounts, images and different related programs. Entropy32 Plus’s screen-based course of is in line with offline transcription, offered the {hardware} and firmware are trusted.
Unbiased entropy testing stays unfinished
The repository states that the Geiger-based entropy supply has not been examined below NIST Particular Publication 800-90B. NIST’s methodology covers the analysis of bodily entropy sources and contains separate procedures for unbiased and non-independent knowledge.
Higgins requires recording uncooked inter-arrival instances over a protracted interval and analyzing them with NIST’s non-IID minimum-entropy estimators. The firmware feedback warn that basic statistical check outcomes alone wouldn’t set up enough entropy.
“Please confirm the entropy supply you plan to make use of in any other case perceive that you may be utilizing the system at your individual danger,” the README states.
The developer recommends mixing the Geiger-derived knowledge with one other independently validated supply earlier than making a pockets for helpful funds. No exterior audit, NIST evaluation or public raw-event dataset was included within the repository as of Sept. 13.
Previous pockets failures present why entropy testing extends past confirming that the ultimate phrases observe BIP39 formatting. Crypto.information reported that Kraken’s safety chief referred to as for unbiased pockets testing after a Coldcard seed-generation vulnerability.
A associated technical evaluate defined how weak entropy can expose Bitcoin wallets with out revealing which individuals use the affected units. Attackers can generate attainable seeds, derive their public addresses and search the blockchain for matches.
Crypto.information later reported that predictable seed technology remained exploitable after the underlying flaw had existed for years. Correcting defective firmware can’t restore phrases generated earlier; affected customers should create new wallets and switch their property.
Entropy32 Plus stays below energetic growth. Its commit historical past reveals an preliminary commit dated Sept. 4, adopted by firmware, circuit-board and enclosure adjustments. The repository had no tagged manufacturing launch or revealed timetable for finishing an unbiased safety evaluation as of Sept. 13.
