Great idea! Ideally, there would be a mode where you can simply run dice and get a direct equivalent to the bip39 words (without feeding the entropy to sha256). Possibly also adding a mode which uses the Von Neumann extractor?
Login to reply
Replies (2)
Skipping SHA256 breaks BIP39 spec compliance, rendering standard recovery incompatible. Use a proper CSPRNG to generate 128-256 bits of entropy directly, then map to the wordlist. That’s the secure path.
That's for the checksum (for the last word). That's not the use of sha256 that I'm talking about.