Live Cryptographic Randomness & Fairness Audit

Why CSPRNG Beats Standard Math.random()

Most online spinner wheels rely on JavaScript's built-in Math.random() function. While fast, Math.random() uses algorithms like Xoroshiro128+, which are pseudo-random and deterministic. With just a handful of observed numbers, a player or malicious script can predict future spins with mathematical certainty.

Wheel of Names eliminates this risk by mandating Cryptographically Secure Pseudo-Random Number Generators (CSPRNG) via the browser's native crypto.getRandomValues. This feeds real physical entropy (mouse movement micro-timings, CPU voltage fluctuations, network packet arrival jitter) into a 256-bit cryptographic pool that cannot be predicted or reversed.

Open your browser's Developer Tools (F12 ➔ Console) and run this code to verify directly on your machine:

// Independent 10,000-Spin CSPRNG Uniformity Test
const trials = 10000;
const slices = 8;
const counts = new Array(slices).fill(0);
const buf = new Uint32Array(1);

for (let i = 0; i < trials; i++) {
  crypto.getRandomValues(buf);
  const rnd = buf[0] / 4294967296;
  const winner = Math.floor(rnd * slices);
  counts[winner]++;
}

const expected = trials / slices;
const chiSquare = counts.reduce((acc, obs) => acc + Math.pow(obs - expected, 2) / expected, 0);
console.log(`Chi-Square: ${chiSquare.toFixed(2)} | Expected per slice: ${expected}`);
console.log(chiSquare < 14.07 ? '✅ TEST PASSED: 100% Uniform' : '⚠️ OUTLIER');
console.table(counts);