Questions tagged [trng]

A TRNG (True Random Number Generator) is hardware that uses nondeterministic physical processes to randomly generate numbers.

Filter by
Sorted by
Tagged with
5 votes
1 answer
158 views

Are USB TRNGs still useful given the recent /dev/(u)random merger?

I'm referencing Jason A. Donenfeld's Random number generator enhancements for Linux 5.17 and 5.18 available here. In summary:- significant outward-facing change is that /dev/random and /dev/urandom ...
Paul Uszak's user avatar
  • 15.4k
3 votes
1 answer
113 views

What to do when a noise source for a TRNG isn't perfectly white

I have constructed a quintessential two transistor noise generator typical of what might be found when doing an internet search for such circuits. After laborious tuning I have it adjusted to about ...
Charlie's user avatar
  • 374
3 votes
3 answers
186 views

Where are TRNGs an absolute need?

Are there situations currently where a PRNG just will not do? Are there current situations where only a TRNG will be useful? What about if someone uses a cryptographically secure PRNG? What is the ...
Vardhan Mahajan's user avatar
3 votes
1 answer
231 views

RSA/ ECC keygen HW vs SW

i have a pretty straightforward question but i can’t seem to find an answer : Regardless of the physical protection provided by an HSM or TPM or any hardware cryptographic key storage system, are keys ...
khaled's user avatar
  • 51
4 votes
4 answers
208 views

Are TRNGs used in low power devices? Why?

I read somewhere that TRNGs are better than cryptographic algorithms that generate pseudo-random numbers (PRNGs) because these algorithms are more energy intensive than TRNGs. By low power devices, I ...
Vardhan Mahajan's user avatar
4 votes
2 answers
802 views

What are the state-of-the-art TRNGs today?

How fast are the fastest ones? Which ones have the most entropy? Which ones are the most practical ones? I tried looking for answers on Wikipedia and also, I tried reading papers, but I am couldn’t ...
Vardhan Mahajan's user avatar
1 vote
2 answers
759 views

Are the null bytes produced by a True Random Number Generator a security issue when using it as a source of entropy for keys in One-time pad?

I can see that True Random Number Generators can produce some null bytes, after some megabytes of data, even 2 consecutive null bytes are produced: ...
alpominth's user avatar
  • 393
4 votes
2 answers
143 views

XOR for more TRNG data?

If I have TRNG data as input (A1,A2,B1,B2,C1,C2) - can I xor it to provide more TRNG data A,B,C,D,E,F,G,H ? ...
KL391's user avatar
  • 41
2 votes
2 answers
250 views

Good entropy from entropy test (90B) but still fail NIST800-22

I designed my TRNG with FPGA. My TRNG has a good entropy performance with a value of 0.99x over several test times. But for the NIST800-22, during several run times, sometimes my sequence passes all ...
Ngo Chú's user avatar
1 vote
1 answer
88 views

Could I Use a Hash Function to Help Generate Cryptographic Key

If I had a true random number generator that had a fault where 10-20% of the bits never change (these bits always produced the same value every time the TRNG was called), could I feed the result of ...
heduncook's user avatar
1 vote
1 answer
276 views

Where can I find a comprehensive guide to running the NIST SP800-90B_EntropyAssessment?

I am already using the 2 they suggest : https://github.com/usnistgov/SP800-90B_EntropyAssessment https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf but, here is where I run into ...
Vardhan Mahajan's user avatar
4 votes
3 answers
1k views

Hotbits vs. Random.org vs. Anything else?

I was searching for a random seed to use with a pseudo-random number generator (not trying to encrypt anything). I went to the following web sites: https://www.fourmilab.ch/hotbits/secure_generate....
brethvoice's user avatar
2 votes
3 answers
1k views

Doing OTP two or more times with a biased TRNG: Will this have the same security as if was done with a non-biased TRNG?

Let's suppose I want to do One-Time-Pad but I only have a biased true random number generator (TRNG). I XOR to the ciphertext block with another with random data got from the TRNG, e repeat the ...
phantomcraft's user avatar
2 votes
1 answer
204 views

Observations about ENT's Chi Squared test on my own RNG—and HotBits's score

Basic question: ENT seems to trip up generators that pass NIST 800-22 and maybe even dieharder. How do the latter two test suites miss such an obvious failure? There are two things I want to mention ...
Adam's user avatar
  • 59
1 vote
1 answer
141 views

Can we apply the Pseudo Random Number (PRNG) as post processing method for True Random Number (TRNG)?

From the NIST SP 800-90B, we can use these cryptographic algorithms (HMAC, AES, Hash function) as a post-processing technique for TRNG. Besides that, can we apply the Pseudo Random Number (PRNG) as a ...
Trần An's user avatar
2 votes
1 answer
418 views

Post processing method for True Random Number Generator

I am finding the post-processing method to improve the randomness of the True Random Number Generator. Especially, TRNG can pass the NIST SP 800-22 after applying the post-processing. I tried to apply ...
Trần An's user avatar
3 votes
1 answer
171 views

DIY TRNG on an embedded system for Ethereum private key generation

I'm trying to build this Ethereum hardware wallet on a custom designed embedded system and I'm no expert. Googling around I found this Robust, low-cost, auditable random number generation for embedded ...
Diego Hernandez Herrera's user avatar
2 votes
2 answers
68 views

Conditioning a biased source with a block cipher?

I'm working my way through Stallings's book Cryptography and Network Security. I'm self-taught on crypto, never took a class but I've implemented some crypto accelerator functions in hardware at work ...
Matt's user avatar
  • 123
2 votes
1 answer
83 views

How much randomness to reasonably "launder" a compromised TRNG?

Assume I have a physical RNG module that generates $n$-bit random numbers that pass randomness tests such as the Dieharder suite. As it is a black box device with an unknown source of randomness, let ...
mezenkur's user avatar
1 vote
1 answer
139 views

When not to reject a random number generator?

I have constructed a true random number generator, and I applied the NIST randomness Test Suite to its results. I have generated around 200 files with my TRNG, each being $10^6$ bits in length. The ...
PAMG's user avatar
  • 161
1 vote
1 answer
108 views

Randomness extraction on correlated data in TRNG

True random number generator (TRNG) designs I read about mostly consist of two digital stages: Low-frequency sampling (of a physical noise source) Randomness extractor The noise signal is sampled at ...
DurandA's user avatar
  • 453
2 votes
1 answer
293 views

Randomness extraction from a Santha-Vazirani (semi-random) source

In a quest to better understand randomness extractors (in the context of TRNG post-processing), I read some papers about the von Neumann Extractor and Santha-Vazirani (SV-) sources. The von Neumann ...
DurandA's user avatar
  • 453
4 votes
0 answers
395 views

Use of scrambler LFSR for randomness extraction of semi-random source

I am using a linear feedback shift register (LFSR) in a scrambler configuration as a randomness extractor for a weakly random source. This source is semi-random (aka. Santha-Vazirani source): the bits ...
DurandA's user avatar
  • 453
5 votes
4 answers
1k views

How to compute the dataset size required by dieharder tests?

I am trying to use the dieharder random number test suite. However, this suite requires massive amount of data (this paper claims 228GB for no rewinding for every test) for most of the tests. I'd like ...
DurandA's user avatar
  • 453
4 votes
2 answers
835 views

Is a LFSR sufficient for post-processing a biased TRNG?

I am building a TRNG on a FPGA based on ring oscillators. I found out that Linear Feedback Shift Registers (LFSRs) are commonly used for the post-processing of TRNGs. Here is my initial design: Let's ...
DurandA's user avatar
  • 453
1 vote
1 answer
133 views

Is there any standard present to measure strength of a generated key using true random number generator?

I was wondering how to measure the security strength of a generated secret key for the below protocol: "A 128 bit random number is generated by TRNG and the random number will be used as a ...
Sami's user avatar
  • 37
14 votes
1 answer
2k views

What issues are there while using Linux's /dev/urandom for generating cryptographic keys?

As of Linux 5.1 the /dev/random no longer uses the blocking pool. There is a talk about the change on the page Removing the Linux /dev/random blocking pool I ...
kelalaka's user avatar
  • 48.5k
5 votes
3 answers
3k views

Why is the output of a True Random Number Generator (TRNG) insecure after it has been compressed?

I came across the following statement regarding true random number generators (TRNG): A “P1 medium” [AIS31] true random number generator (TRNG) may not be directly used due to cryptographic reasons. ...
Jordan's user avatar
  • 51
-1 votes
2 answers
383 views

Will OTP provide quantum resistance under 5 conditions?

We already have quantum computing, but when quantum computing becomes commercially available there is a problem for many but not all encryption algorithm. The One-Time-Pad or OTP is the one and only ...
Ox-Fox's user avatar
  • 11
3 votes
1 answer
166 views

Hardware Gaussian random numbers for lattice-based cryptography

I have been recently reading about lattice-based cryptography. I read that a key aspect of such protocols rely on added Gaussian noise on lattices, and which therefore require highly efficient and ...
Rafa's user avatar
  • 33
3 votes
1 answer
283 views

Strong RNG for encryption/authentation algo

I saw in the market several hardware options for creating strong RNG to produce strong KEYS: HSM TPM internal TRNG Intel RDSEED (TRNG)/RDRAND My questions are; What is the strength/entropy ...
Offir's user avatar
  • 283
1 vote
2 answers
133 views

What machine learning accuracy is assumed to be predictable for TRNG/PUF application?

In regular machine learning (ML) applications, usually an accuracy of greater than 95% is desired. In an ideal TRNG/PUF applications, unpredictable behavior (50% accuracy with ML models) is desired. ...
Shannon's user avatar
  • 263
2 votes
1 answer
649 views

"Jitterentropy" vs CPU RDRAND in VeraCrypt 1.24

Veracrypt 1.24 just came out. It uses a true random number generator based on hardware events; namely, on CPU timing jitter, or "Jitterentropy". As an alternative to CPU RDRAND, I am a bit jittery ...
Patriot's user avatar
  • 3,132
1 vote
4 answers
402 views

How can Bob quickly generate thousands of letters randomly while strongly mitigating the risk of compromise?

Bob wants to generate four thousand English letters for a proper one-time pad without resorting to hand-thrown dice, despite the advantages. Rolling dice would be too slow and tiresome. Bob does not ...
Patriot's user avatar
  • 3,132
3 votes
3 answers
2k views

Is RDSEED a true RNG?

Is Intel's RDSEED a true random number generator?
g Kishore's user avatar
2 votes
1 answer
163 views

Mapping between NIST test and TRNG features

Each of the NIST tests are generally explained in Random Bit Generation - Guide to the Statistical Tests. I was wondering if some one can help me understand them better. For example, which tests show ...
Shannon's user avatar
  • 263
4 votes
2 answers
484 views

Verifying randomness and uniqueness of TRNG output

We need to verify two claims about a set of numbers: They are random They are unique in the set (the set is about 200 billion (2TB bin storage)) Supposedly, the numbers were generated by a TRNG (...
zeridon's user avatar
  • 143
1 vote
2 answers
448 views

What are known metrics for TRNG?

I was wondering what the known metrics are for studying the randomness of TRNG (besides NIST tests). For example, for PUFs, there are known metrics such as uniformity, uniqueness, BER, etc.
Shannon's user avatar
  • 263
4 votes
2 answers
538 views

Usage and limitations of sponge functions for PRNG

This HRNG uses SHA3 as a sponge function (in its device driver) to inflate ots raw source output to many MByte/s. They compare this output rate to the output of other HRNG which don't use a sponge ...
jans's user avatar
  • 287
7 votes
3 answers
2k views

Perform ENT / Dieharder on raw entropy or on whitenened entropy?

In this question about hardware random number generator, a discussion about the following question has been started: In order to test RNG's and entropy's quality, should test suites like ENT and ...
jans's user avatar
  • 287
7 votes
3 answers
2k views

Differences between methods of hardware random number generators

I'm reading about various hardware random number generators which - among others - implement the following approaches: Analog-to-digital converter noise Johnson–Nyquist noise Reverse biased ...
jans's user avatar
  • 287
6 votes
2 answers
462 views

Are my random numbers really "bad" or is that a statistical effect which "must" happen from time to time?

My software uses a TRNG (entropy source) which is part of an MCU. A check of random numbers generated by my software, carried out by a testing authority revealed a problem, which I have to examine ...
MichaelW's user avatar
  • 1,497
7 votes
2 answers
903 views

Random number generator issue

I wrote a litte random generator using a geiger tube. I use a 16bit timer that overflows every ~1ms; when i get a reading form the geiger (~36count/minute), i save the current timer value as "random ...
Lesto's user avatar
  • 181
4 votes
3 answers
1k views

What is proper use of a True Random Number Generator?

Let's say I have a true random number generator TRNG. Random numbers are generated on demand from a HW-entropy source, resulting in a 32-bit random value each time it is called. I have to fill an ...
MichaelW's user avatar
  • 1,497
0 votes
2 answers
878 views

Algorithm to generate ECDSA keys with random number generator

I have a certified random number generator (TRNG, it does not matter what it is for the question). I would like to use it as a source to generate secp384r1 ECDSA keys. What is the algorithm I should ...
user1563721's user avatar
4 votes
2 answers
1k views

Public Randomness-Based Random Number Generator using Mobile Phone?

I have an idea to create a True Random Number Generator that use randomness source from a smartphone sensors. My idea is to collect sensors data from a lot of smartphone using mobile apps and then the ...
user53299's user avatar
1 vote
2 answers
511 views

Open-source usb TRNG and US standards - Help choosing [closed]

I came across the ChaosKey and I remember the time I came accros the entrypy key that was always out of stock. I would really want one to play with, I would like the best open source I can get for ...
Jeremy Dicaire's user avatar
1 vote
3 answers
270 views

Digital Certificates genereted from Hardware Security Module

Software library without hardware based source of entropy will provide enough security to generate digital certificates. However Hardware security Modules provide hardware based source of entropy and ...
crypt's user avatar
  • 2,427
7 votes
4 answers
4k views

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

In a recent answer to a question about CSPRNGs, it was stated that… Nondeterministic algorithms where there is no such requirement, and ideally could be replaced by a true random generator. Example: ...
e-sushi's user avatar
  • 17.9k