New answers tagged


The security in bits of a 12-word mnemonic that has a valid checksum as per BIP39 is not 132 bits, but rather 128 bits, as the last 4 bits are determined based on the first 128 bits - the initial "entropy". Even though the range of 2^132 of all possible mnemonics is 16 times larger than 2^128 (where (2^128)*16 = 2^132), the checksum cannot be predicted ...

Top 50 recent answers are included