Replying to Avatar OrangeSurf

# Dice Frame

100 dice rolls in one

# Observation

It is difficult and time consuming to achieve a high confidence that a die is not biased.

By rolling a die and performing a statistical analysis you may be able to quickly tell that a die is very likely biased, for example if your first 10 rolls are a 6 there is only a 1 in 60 million chance that the die is not biased.

(1/6)^10 = 60466176

Instead suppose you roll (3,3,8,3,1,2,3,3,2,7).

Half the 10 rolls being a 3 tells you little, it is likely that you would need to perform many more rolls before having confidence tha the die is biased.

You can't quickly tell that it's not slightly biased.

# Resolution

When generating a entropy for bitcoin purposes (BIP39 seed) it is safe and generally easier to increase the number of events than it is to interrogate the entropy generated per event.

So, we will make many dice throws.

What if you could roll 100 dice in one throw?

# Epoxy

To stop the dice falling out the entire recess is filled with a layer a clear epoxy. Small bubbles are not a problem for legibility.

# Buy

This product is intended as a discussion point / educational material only. For proper backup use a metal plate such as those sold by sx6 (https://sx6.store/product/steel-bitcoin-seed-metal-plate/) which at 140000 sats (including shipping and center punch) are a better product at a lower price. That said, if you do want to buy one you can do so here (https://tips.orange.surf/apps/PgxW5mvCkCkBEaiMPRdM8X3poyd/pos)

# Download

You can download the STL file here (https://orange.surf/content/files/2022/07/dice-frame.stl). I'd love to hear if you print one, tag me

The main problem with using dice is knowing that the eventual seed was indeed generated from those dice. For example, ColdCard runs the dice input through SHA256 to produce the seed. But to confirm that this is what itโ€™s actually doing, you need to send the same dice rolls to a second implementation to confirm that it produces the same BIP-39 seed.

To avoid this, one would need to use a dice-to-BIP-39 encoding scheme that can be performed by hand, offline.

Reply to this note

Please Login to reply.

Discussion

Yes, I use bitcoinqna and SFA's seedtool with a test seed to check, then repeat with a real 100 rolls without entering elsewhere.

This is the same regardless of how you generate the seed in a deterministic (reproducible) way.