An open-source Bitcoin seed generator has transformed radioactive decay occasions into 12-word and 24-word BIP39 restoration phrases utilizing an offline {hardware} gadget.
The Entropy32 Plus repository, printed by developer Alexander Higgins in September 2026, comprises the challenge’s firmware, circuit-board designs, fabrication information and printable enclosure. Higgins describes the gadget as an experimental, instructional challenge and warns customers to not belief it with substantial funds earlier than an impartial assessment.
Often known as “The Universe Bifurcator,” the gadget takes pulses from a Geiger counter and measures the time between detected occasions. Its firmware converts comparisons between consecutive intervals into bits, collects a 512-bit enter pool and processes the information with SHA-256.
Entropy32 Plus then codecs a part of the ensuing hash as a normal BIP39 restoration phrase. The gadget operates with out Wi-Fi, Bluetooth or persistent seed storage, in keeping with its printed design.
A Bitcoin Seed Generator Is Utilizing Radioactive Decay for Entropy
An open-source challenge referred to as Entropy32 Plus makes use of radioactive decay as a bodily entropy supply to generate Bitcoin BIP39 seed phrases. A Geiger counter captures decay occasions, whose timing is processed by… pic.twitter.com/ZhREDr89HQ
— Wu Blockchain (@WuBlockchain) September 13, 2026
Entropy32 Plus measures time between radiation occasions
Radioactive decay happens unpredictably on the stage of particular person atoms. Entropy32 Plus makes use of the timing of detected decay occasions as its bodily supply of randomness as an alternative of relying solely on a software-generated worth.
The present design accepts pulses by a 3.5-millimeter connection from a GQ Electronics GMC-320S Geiger counter. Its documentation says the counter can detect emissions from a radioactive supply or background radiation.
After receiving a pulse, an LM393 comparator converts the counter’s analog sign right into a digital enter. The customized circuit board passes that sign to an ATmega328P microcontroller.
The challenge’s firmware data every accepted occasion utilizing a microsecond timer. It compares the newest interval with the previous one, producing a one when the brand new interval is longer and a zero when it’s shorter.
Equal intervals are discarded. Measurements under 200 microseconds are rejected as doable glitches, whereas accepted comparisons proceed till the gadget has collected 512 bits.
Higgins says this technique makes use of pulse timing as a result of the exact arrival of a person decay occasion can’t be predicted. The developer doesn’t declare that each collected comparability contributes one full little bit of measured entropy.
SHA-256 circumstances the uncooked Bitcoin seed knowledge
As soon as the 512-bit pool is full, Entropy32 Plus processes all 64 bytes by its bundled SHA-256 code. The firmware makes use of the primary 16 bytes of the ensuing hash for a 12-word phrase or all 32 bytes for a 24-word phrase.
In accordance with the challenge, hashing is meant to scale back seen patterns linked to detector useless time, count-rate adjustments or correlations between measurements. Hash conditioning can unfold out there entropy throughout an output, nevertheless it doesn’t show how a lot unpredictability was current within the unique knowledge.
The firmware features a startup check for SHA-256. It calculates the hash of “abc” and compares the consequence with a identified worth. The gadget stops earlier than gathering entropy if the reply is inaccurate.
Passing the self-test confirms that the implementation returns the anticipated consequence for that check vector. It doesn’t check the Geiger counter, assess pulse independence or measure the minimal entropy coming into the hash.
The challenge collects twice as many comparability bits as the utmost 256-bit BIP39 enter it produces. Till the bodily supply undergoes formal measurement, the repository doesn’t set up how a lot usable entropy every comparability comprises.
The gadget maps conditioned knowledge to BIP39 phrases
Following SHA-256 conditioning, the gadget applies the method outlined within the BIP39 specification. BIP39 converts an accredited entropy size right into a mnemonic sentence chosen from a standardized checklist of two,048 phrases.
For a 12-word phrase, Entropy32 Plus makes use of 128 bits of conditioned knowledge and calculates a four-bit checksum. The mixed 132 bits are divided into twelve 11-bit teams, with every group deciding on one phrase.
Its 24-word setting makes use of 256 bits and an eight-bit checksum. Dividing the ensuing 264-bit sequence produces 24 phrase indexes.
Crypto.information’ seed phrase information explains that restoration phrases maintain the knowledge wanted to revive pockets entry. Anybody who obtains the proper phrases of their correct order can recreate the pockets’s keys.
A seed phrase shouldn’t be itself a group of independently generated phrases. As crypto.information defined in its information to private and non-private keys, fashionable Bitcoin wallets derive many non-public keys from one grasp seed. Weak spot within the unique entropy can due to this fact have an effect on each tackle generated from it.
Entropy32 Plus compiles the whole BIP39 English checklist into its firmware. The wordlist occupies 13,117 bytes, or roughly 43% of the microcontroller’s flash capability, in keeping with the repository.
With the OLED interface, SHA-256 implementation and assortment logic included, the compiled program makes use of 30,006 of the chip’s 30,720 out there bytes. Solely 714 bytes stay unused.
Offline design retains seeds away from related units
The printed {hardware} information checklist no wi-fi communications {hardware}. Customers function the generator by two buttons and browse the phrase from a 0.91-inch OLED display.
Generated phrase indexes stay briefly within the microcontroller’s RAM. As soon as the person data the phrase, urgent each buttons opens a affirmation course of that overwrites the phrase array and restarts entropy assortment.
The firmware clears the unique pool after copying it for processing. Momentary hash, checksum and entropy buffers are overwritten after the BIP39 indexes have been calculated.
In accordance with the developer, the gadget doesn’t save a restoration phrase to persistent reminiscence. The open-source design doesn’t embody a safe aspect or a mechanism that proves the put in firmware matches the general public code.
Bodily isolation removes a number of network-based assault routes, nevertheless it doesn’t confirm {that a} gadget was assembled accurately or loaded with trusted software program. A modified unit might show predetermined phrases or retain generated knowledge with out altering its outward look.
Crypto.information’ pockets safety information recommends preserving restoration phrases away from telephones, cloud accounts, pictures and different related methods. Entropy32 Plus’s screen-based course of is in keeping with offline transcription, supplied the {hardware} and firmware are trusted.
Impartial entropy testing stays unfinished
The repository states that the Geiger-based entropy supply has not been examined beneath NIST Particular Publication 800-90B. NIST’s methodology covers the analysis of bodily entropy sources and contains separate procedures for impartial and non-independent knowledge.
Higgins requires recording uncooked inter-arrival instances over a protracted interval and inspecting them with NIST’s non-IID minimum-entropy estimators. The firmware feedback warn that normal statistical check outcomes alone wouldn’t set up enough entropy.
“Please confirm the entropy supply you plan to make use of in any other case perceive that you’ll be utilizing the gadget at your individual danger,” the README states.
The developer recommends mixing the Geiger-derived knowledge with one other independently validated supply earlier than making a pockets for useful funds. No exterior audit, NIST evaluation or public raw-event dataset was included within the repository as of Sept. 13.
Previous pockets failures present why entropy testing extends past confirming that the ultimate phrases observe BIP39 formatting. Crypto.information reported that Kraken’s safety chief referred to as for impartial pockets testing after a Coldcard seed-generation vulnerability.
A associated technical assessment defined how weak entropy can expose Bitcoin wallets with out revealing which individuals use the affected units. Attackers can generate doable seeds, derive their public addresses and search the blockchain for matches.
Crypto.information later reported that predictable seed technology remained exploitable after the underlying flaw had existed for years. Correcting defective firmware can not restore phrases generated earlier; affected customers should create new wallets and switch their property.
Entropy32 Plus stays beneath lively growth. Its commit historical past reveals an preliminary commit dated Sept. 4, adopted by firmware, circuit-board and enclosure adjustments. The repository had no tagged manufacturing launch or printed timetable for finishing an impartial safety evaluation as of Sept. 13.
