Dice cost
Every extra roll has a price.
Compare the ideal mathematical maximum with the time and procedural risk introduced by a longer ceremony.
50 ideal fair six-sided rolls provide at most 129.25 bits, 1.25 bits above the nearest 128-bit reference.
At most 129.25 bits.
That upper bound assumes every roll is fair, independent, private, recorded correctly, and converted without bias. A short sample cannot establish those assumptions.
Ideal maximum129.25 bits50 × log₂(6)
At 3 sec/roll3 minrolling only, before checking
Nearest reference128 bits+1.25 ideal bits
Plenty includes procedure risk.
Fifty ideal rolls cross 128 bits. Ninety-nine are just below 256; one hundred cross it. A wallet may require a particular count because of its exact construction—not because a universal ritual exists.
This is not a seed-generation procedure and it never collects dice results. Real wallet workflows define their own conversion and rejection rules.