Join Nostr
2026-08-25 19:02:22 UTC
in reply to

Penlock on Nostr: I call bias the net loss of entropy, which is what we care about, and not the ...

I call bias the net loss of entropy, which is what we care about, and not the deviation from the mean. In that sense, 51/49 is already a 2% bias, out of a big fat coin that's nothing like what you have in your pocket.

And no, it doesn't diminishes over turns: it's a whole 2% entropy loss on your final entropy: so you'd get 125,44 bits of entropy instead of 128.

Now, to be clear, even a 20% bias would lead you to an unbreakable seed phrase -- so in that sense, maybe it can appear negligible. In any case, my goal with Penlock was to create a fail-proof process, and while my number are rough estimate I stand by paper tiles having the both a better safety and entropy profile.