comment on why the securerandom.getinstancestrong() fallback is neither weaker nor reachable

src/main/java/com/sparrowwallet/sparrow/control/MnemonicKeystoreEntryPane.java

@@ -62,6 +62,8 @@ public class MnemonicKeystoreEntryPane extends MnemonicKeystorePane {
         try {
             secureRandom = SecureRandom.getInstanceStrong();
         } catch(NoSuchAlgorithmException e) {
+            //Not a fallback to a weaker source: both resolve to the SUN provider and the same java.base implementation seeded from the OS CSPRNG
+            //This branch is in any case unreachable, since securerandom.strongAlgorithms specifies DRBG:SUN, always present in the bundled runtime - see #2040
             secureRandom = new SecureRandom();
         }
 

src/main/java/com/sparrowwallet/sparrow/control/MnemonicKeystoreImportPane.java

@@ -168,6 +168,8 @@ public class MnemonicKeystoreImportPane extends MnemonicKeystorePane {
         try {
             secureRandom = SecureRandom.getInstanceStrong();
         } catch(NoSuchAlgorithmException e) {
+            //Not a fallback to a weaker source: both resolve to the SUN provider and the same java.base implementation seeded from the OS CSPRNG
+            //This branch is in any case unreachable, since securerandom.strongAlgorithms specifies DRBG:SUN, always present in the bundled runtime - see #2040
             secureRandom = new SecureRandom();
         }
 

src/main/java/com/sparrowwallet/sparrow/terminal/wallet/Bip39Dialog.java

@@ -112,6 +112,8 @@ public class Bip39Dialog extends NewWalletDialog {
             try {
                 secureRandom = SecureRandom.getInstanceStrong();
             } catch(NoSuchAlgorithmException e) {
+                //Not a fallback to a weaker source: both resolve to the SUN provider and the same java.base implementation seeded from the OS CSPRNG
+                //This branch is in any case unreachable, since securerandom.strongAlgorithms specifies DRBG:SUN, always present in the bundled runtime - see #2040
                 secureRandom = new SecureRandom();
             }