An open-source Bitcoin seed generator has converted radioactive decay events into 12-word and 24-word BIP39 recovery phrases using an offline hardware device.
Summary
- Entropy32 Plus converts radioactive decay timing into twelve or twenty-four word Bitcoin recovery phrases offline.
- Firmware collects 512 comparison bits before conditioning the pool with its SHA-256 implementation locally offline.
- The device stores generated words temporarily in RAM and provides a manual wipe command afterward.
- Its developer says entropy quality remains unvalidated under NIST SP 800-90B testing and independent review.
- Open-source files cover firmware, circuit boards, fabrication data, enclosures and the BIP39 wordlist for inspection.
The Entropy32 Plus repository, published by developer Alexander Higgins in September 2026, contains the project’s firmware, circuit-board designs, fabrication files and printable enclosure. Higgins describes the device as an experimental, educational project and warns users not to trust it with substantial funds before an independent review.
Known as “The Universe Bifurcator,” the device takes pulses from a Geiger counter and measures the time between detected events. Its firmware converts comparisons between consecutive intervals into bits, collects a 512-bit input pool and processes the data with SHA-256.
Entropy32 Plus then formats part of the resulting hash as a standard BIP39 recovery phrase. The device operates without Wi-Fi, Bluetooth or persistent seed storage, according to its published design.
Entropy32 Plus measures time between radiation events
Radioactive decay occurs unpredictably at the level of individual atoms. Entropy32 Plus uses the timing of detected decay events as its physical source of randomness instead of relying solely on a software-generated value.
The current design accepts pulses through a 3.5-millimeter connection from a GQ Electronics GMC-320S Geiger counter. Its documentation says the counter can detect emissions from a radioactive source or background radiation.
After receiving a pulse, an LM393 comparator converts the counter’s analog signal into a digital input. The custom circuit board passes that signal to an ATmega328P microcontroller.
The project’s firmware records each accepted event using a microsecond timer. It compares the latest interval with the preceding one, producing a one when the new interval is longer and a zero when it is shorter.
Equal intervals are discarded. Measurements below 200 microseconds are rejected as possible glitches, while accepted comparisons continue until the device has collected 512 bits.
Higgins says this method uses pulse timing because the precise arrival of an individual decay event cannot be predicted. The developer does not claim that every collected comparison contributes one full bit of measured entropy.
SHA-256 conditions the raw Bitcoin seed data
Once the 512-bit pool is complete, Entropy32 Plus processes all 64 bytes through its bundled SHA-256 code. The firmware uses the first 16 bytes of the resulting hash for a 12-word phrase or all 32 bytes for a 24-word phrase.
According to the project, hashing is intended to reduce visible patterns linked to detector dead time, count-rate changes or correlations between measurements. Hash conditioning can spread available entropy across an output, but it does not prove how much unpredictability was present in the original data.
The firmware includes a startup test for SHA-256. It calculates the hash of “abc” and compares the result with a known value. The device stops before collecting entropy if the answer is incorrect.
Passing the self-test confirms that the implementation returns the expected result for that test vector. It does not test the Geiger counter, assess pulse independence or measure the minimum entropy entering the hash.
The project collects twice as many comparison bits as the maximum 256-bit BIP39 input it produces. Until the physical source undergoes formal measurement, the repository does not establish how much usable entropy each comparison contains.
The device maps conditioned data to BIP39 words
Following SHA-256 conditioning, the device applies the process defined in the BIP39 specification. BIP39 converts an approved entropy length into a mnemonic sentence selected from a standardized list of 2,048 words.
For a 12-word phrase, Entropy32 Plus uses 128 bits of conditioned data and calculates a four-bit checksum. The combined 132 bits are divided into twelve 11-bit groups, with each group selecting one word.
Its 24-word setting uses 256 bits and an eight-bit checksum. Dividing the resulting 264-bit sequence produces 24 word indexes.
Crypto.news’ seed phrase guide explains that recovery phrases hold the information needed to restore wallet access. Anyone who obtains the correct words in their proper order can recreate the wallet’s keys.
A seed phrase is not itself a collection of independently generated words. As crypto.news explained in its guide to public and private keys, modern Bitcoin wallets derive many private keys from one master seed. Weakness in the original entropy can therefore affect every address generated from it.
Entropy32 Plus compiles the complete BIP39 English list into its firmware. The wordlist occupies 13,117 bytes, or roughly 43% of the microcontroller’s flash capacity, according to the repository.
With the OLED interface, SHA-256 implementation and collection logic included, the compiled program uses 30,006 of the chip’s 30,720 available bytes. Only 714 bytes remain unused.
Offline design keeps seeds away from connected devices
The published hardware files list no wireless communications hardware. Users operate the generator through two buttons and read the phrase from a 0.91-inch OLED screen.
Generated word indexes remain temporarily in the microcontroller’s RAM. Once the user records the phrase, pressing both buttons opens a confirmation process that overwrites the word array and restarts entropy collection.
The firmware clears the original pool after copying it for processing. Temporary hash, checksum and entropy buffers are overwritten after the BIP39 indexes have been calculated.
According to the developer, the device does not save a recovery phrase to persistent memory. The open-source design does not include a secure element or a mechanism that proves the installed firmware matches the public code.
Physical isolation removes several network-based attack routes, but it does not verify that a device was assembled correctly or loaded with trusted software. A modified unit could display predetermined words or retain generated data without changing its outward appearance.
Crypto.news’ wallet security guide recommends keeping recovery phrases away from phones, cloud accounts, photographs and other connected systems. Entropy32 Plus’s screen-based process is consistent with offline transcription, provided the hardware and firmware are trusted.
Independent entropy testing remains unfinished
The repository states that the Geiger-based entropy source has not been tested under NIST Special Publication 800-90B. NIST’s methodology covers the evaluation of physical entropy sources and includes separate procedures for independent and non-independent data.
Higgins calls for recording raw inter-arrival times over a long period and examining them with NIST’s non-IID minimum-entropy estimators. The firmware comments warn that general statistical test results alone would not establish sufficient entropy.
“Please verify the entropy source you intend to use otherwise understand that you will be using the device at your own risk,” the README states.
The developer recommends mixing the Geiger-derived data with another independently validated source before creating a wallet for valuable funds. No outside audit, NIST assessment or public raw-event dataset was included in the repository as of Sept. 13.
Past wallet failures show why entropy testing extends beyond confirming that the final words follow BIP39 formatting. Crypto.news reported that Kraken’s security chief called for independent wallet testing after a Coldcard seed-generation vulnerability.
A related technical review explained how weak entropy can expose Bitcoin wallets without revealing which people use the affected devices. Attackers can generate possible seeds, derive their public addresses and search the blockchain for matches.
Crypto.news later reported that predictable seed generation remained exploitable after the underlying flaw had existed for years. Correcting faulty firmware cannot repair phrases generated earlier; affected users must create new wallets and transfer their assets.
Entropy32 Plus remains under active development. Its commit history shows an initial commit dated Sept. 4, followed by firmware, circuit-board and enclosure changes. The repository had no tagged production release or published timetable for completing an independent security assessment as of Sept. 13.
Be the first to comment