Because you have to do checksum generation anyway, there's no point in generating the binary bits that map to words. You might as well just enter the dice rolls. Now, that doesn't preclude you from verifying all inputs across various devices and systems. Use dummy data first - Roll the dice (at least 150-200 rolls), record the outcome (1-6). - sha256 hash the dice to create 256 bits of hex. - Use the hex to create the seed words. - Do this simultaneously across three or more devices. - Verify that each device agrees with each stage in each other device. - Once verified, throw away these keys. - Repeat if you think they might change across iterations You can now assert that all of the devices, as they are, produce the same deterministic and highly improbable output. As such, you can be reasonably assured that when it comes time to actually generate a real seed, you have some trust that those seeds are going to be generated according to your expectations.