← back to the machine

Check that we are not cheating you

Before you play, we publish the hash of our secret seed. The result comes from combining it with your client seed and the play number. When we rotate the seed we reveal it in full: then you can recompute all your plays and check that the hash matches. Since we committed to the hash beforehand, we cannot change the seed afterwards without getting caught.

hash = SHA256(hex_decode(seed)) · roll = HMAC_SHA256(hex_decode(seed), `${pubkey}:${clientSeed}:${nonce}`)[0..4] % 10000

The hash is over the seed bytes (hex-decoded), not the hex text. Python: hashlib.sha256(bytes.fromhex(seed)).hexdigest(). Every play uses a fresh random client seed generated by your browser; it is stored with the play and shown below. Note: 2^32 is not a multiple of 10,000, so rolls 0–7295 are more likely than the rest by 1 part in 429,496 (a 0.0002% bias, and it slightly favours you: it lands on the losing side of the table).