

Dice Balance Check Not even dice necessarily produce perfectly random outputs. As you work through this guide, if your BIP39 word list starts with 0, you will need to adjust the numbers of your BIP39 word list +1. When you source your BIP39 wordlist, check to see if the numbers start with 0 or 1. According to BIP39, there are 2048 available word indexes, expressed as 0-2047. The possible results of your dice roll will start with 1, this is called human-index. A major advantage of this method is that it maps the dice roll directly to the BIP39 word list. This fast method for generating your seed phrase requires having a specific denomination of dice at your disposal - 2 x 20-sided dice and 2 x 10-sided dice. You can use any amount of dice to generate a seed phrase, however, this guide will focus on using 2 x 20D dice and 1 x D100 dice (2 x 10-sided dice representing 0-99). Further reading: Do you need more than 128-bit entropy? The "missing" ~0,03 bits per word even multiplied with 12 words doesn't qualify for a whole single bit affected.

(bits) Total set entropy = D20 + 2*D10 = 4,32 + 2 * 3,32 ~= 10,97 bits of entropy per single roll (word), so that way we get enough accuracy. Does our set of dice fit with our target entropy? D20 dice entropy = log2(20) = 4,32. Why are 128 bits enough? Realistically, a very powerful organization with lots of cash could hope to perform, say, at most 2^85 elementary computations (like encrypting an AES block) within a year - it won't be discreet, and that's still less than the millionth part of the millionth part of a 2⌃128 space. That is our target 128 bits of entropy + 4 bits of checksum. 12 words * 11 bits = 132 bits of entropy. How much Entropy is enough? A single word from a dictionary of 2048 words represents log2(2048) = 11 bits of entropy.
