How UnionKey Generates Seed Phrases: The Science Behind True Randomness
Every Wallet Begins with Randomness
When people think about hardware wallet security, they usually focus on secure elements, encryption algorithms, or firmware.
But long before any of those protections come into play, one critical question determines everything that follows:
How was the private key generated?
Every cryptocurrency wallet ultimately derives its security from a single source—entropy.
If that entropy is truly unpredictable, modern cryptography can protect your assets for decades.
If it isn't, no amount of encryption can compensate for the weakness introduced at the very beginning.
A Seed Phrase Is Not Just a List of Words
Most users see a recovery phrase as a sequence of 12 or 24 English words.
Those words are simply a human-readable representation of binary entropy.
Under the BIP-39 standard:
- A 12-word recovery phrase encodes 128 bits of entropy.
- A 24-word recovery phrase encodes 256 bits of entropy.
The words themselves are not the secret.
The entropy used to generate them is.
How a Seed Phrase Is Created
The seed generation process follows a straightforward cryptographic pipeline:
Each step depends entirely on the quality of the entropy collected at the beginning.
If the entropy is weak, every subsequent operation inherits that weakness.
What Does "128 Bits of Security" Actually Mean?
The phrase "128-bit security" is often used without context.
In practice, it represents a search space of:
2¹²⁸ possible values
That's approximately:
340,282,366,920,938,463,463,374,607,431,768,211,456 possible seeds.
This number is so large that brute-forcing every possible seed is considered computationally infeasible—even with the combined computing power of the entire world.
The strength of modern wallet security comes from this astronomical level of unpredictability.
TRNG vs PRNG: They're Fundamentally Different
Not all randomness is created equally.
True Random Number Generator (TRNG)
A TRNG derives entropy directly from physical phenomena, such as:
- Thermal noise
- Oscillator jitter
- Voltage fluctuations
- Hardware security circuitry
Because these events occur naturally, they are inherently unpredictable.
Even the hardware manufacturer cannot predict the next output.
Pseudo Random Number Generator (PRNG)
A PRNG operates differently.
It starts with an internal state (often called a seed) and uses deterministic algorithms to generate sequences that appear random.
Initial State ↓ Algorithm ↓ Pseudo-Random Output
If the initial state is known—or can be reconstructed—the entire sequence becomes predictable.
PRNGs are valuable tools for many applications.
They are not substitutes for true entropy during cryptographic key generation.
Why True Entropy Matters
The quality of your private key can never exceed the quality of the entropy that created it.
Imagine a wallet that intends to generate a 128-bit seed but accidentally starts with only 40 bits of effective entropy.
No amount of:
- SHA-256
- AES
- ECC
- Secure Elements
- Digital Signatures
can restore the missing randomness.
Cryptographic algorithms transform information.
They do not create new information.
This principle is fundamental to information theory.
Hash Functions Cannot Create Entropy
One common misconception is that hashing weak randomness somehow makes it secure.
It doesn't.
A cryptographic hash function rearranges existing information into a different representation.
It cannot increase the number of possible inputs.
If the original entropy contains only one million possible states, the hash output still represents only one million possible states.
Hashing improves uniformity.
It does not increase entropy.
The Role of a Secure Element
Secure elements are an essential component of modern hardware wallets.
Their responsibilities include:
- Secure private key storage
- Hardware-isolated cryptographic operations
- Physical tamper resistance
- Protection against side-channel attacks
What they do not do is magically generate cryptographic security from insufficient entropy.
Secure storage cannot compensate for a weakly generated key.
The integrity of the entire system still depends on how that key was created.
Security Begins Long Before the Private Key Exists
Generating a wallet securely requires more than choosing strong cryptographic algorithms.
A trustworthy implementation should ensure that:
- Hardware entropy is actually consumed.
- Software fallback paths cannot silently replace hardware randomness.
- Security-critical failures fail safely.
- Build systems verify linked implementations.
- Firmware integrity can be independently verified.
The objective is not simply to write secure code.
The objective is to ensure the code that actually runs is the code that was intended.
How UnionKey Approaches Seed Generation
At UnionKey, we believe that wallet security begins with the very first bit of entropy.
Our seed generation architecture is designed around several core principles:
- Entropy originates from dedicated hardware randomness.
- Private keys are generated and remain inside secure hardware.
- Seed generation does not rely on general-purpose software PRNGs.
- Security-critical components are validated throughout the build process.
- Every transaction must be independently verified on the hardware device before signing.
Security is never a single feature.
It is the result of every layer functioning exactly as intended.
Questions Every Hardware Wallet User Should Ask
Before choosing a hardware wallet, consider asking:
- Where does the entropy come from?
- Is a true hardware random number generator used?
- Can software fallback paths affect seed generation?
- Has the implementation undergone independent security review?
- Is the firmware open source or independently verifiable?
- Are reproducible builds supported?
- Can users independently verify firmware integrity?
These questions matter far more than display size, Bluetooth connectivity, or industrial design.
Because ultimately,
your wallet is only as secure as the randomness that created it.
Final Thoughts
Cryptography is often viewed as a discipline of mathematics.
In reality, it is equally a discipline of engineering.
A perfectly designed cryptographic system can still fail if the implementation allows weak entropy to enter the key generation process.
Security begins long before encryption.
It begins with randomness.
At UnionKey, we believe that true digital asset ownership starts with a single principle:
A private key is only as secure as the entropy from which it was born.