Provably Fair RNG

The commit-reveal cycle

1. Commit: Server generates a random server_seed, shows you its SHA-256 hash before the round starts.
2. Bet: You can rotate your client_seed at any time. The nonce auto-increments per round.
3. Resolve: Outcome = HMAC-SHA256(server_seed, {client_seed}:{nonce}) mapped into a float, then into crash points per rocket.
4. Reveal: After the round ends, the full server_seed is published. You can recompute and confirm the hash matches the original commit.

Verify a round

const h = crypto.createHmac("sha256", server_seed)
  .update(`${client_seed}:${nonce}`).digest("hex");

// Take first 13 hex chars → 52-bit int → float in [0,1)
const r = parseInt(h.slice(0, 13), 16) / 2 ** 52;

// Map r into crash point per rocket via licensor curve (RTP 96.5%)

Use the in-app verifier at /verify with any round's seeds.