Questions tagged [trng]

A TRNG (True Random Number Generator) is hardware that uses nondeterministic physical processes to randomly generate numbers.

Filter by
Sorted by
Tagged with
4 votes
3 answers
239 views

Hotbits vs. Random.org vs. Anything else?

I was searching for a random seed to use with a pseudo-random number generator (not trying to encrypt anything). I went to the following web sites: https://www.fourmilab.ch/hotbits/secure_generate....
user avatar
2 votes
3 answers
1k views

Doing OTP two or more times with a biased TRNG: Will this have the same security as if was done with a non-biased TRNG?

Let's suppose I want to do One-Time-Pad but I only have a biased true random number generator (TRNG). I XOR to the ciphertext block with another with random data got from the TRNG, e repeat the ...
user avatar
2 votes
1 answer
82 views

Observations about ENT's Chi Squared test on my own RNG—and HotBits's score

Basic question: ENT seems to trip up generators that pass NIST 800-22 and maybe even dieharder. How do the latter two test suites miss such an obvious failure? There are two things I want to mention ...
user avatar
  • 21
1 vote
1 answer
70 views

Can we apply the Pseudo Random Number (PRNG) as post processing method for True Random Number (TRNG)?

From the NIST SP 800-90B, we can use these cryptographic algorithms (HMAC, AES, Hash function) as a post-processing technique for TRNG. Besides that, can we apply the Pseudo Random Number (PRNG) as a ...
user avatar
2 votes
1 answer
110 views

Post processing method for True Random Number Generator

I am finding the post-processing method to improve the randomness of the True Random Number Generator. Especially, TRNG can pass the NIST SP 800-22 after applying the post-processing. I tried to apply ...
user avatar
3 votes
1 answer
106 views

DIY TRNG on an embedded system for Ethereum private key generation

I'm trying to build this Ethereum hardware wallet on a custom designed embedded system and I'm no expert. Googling around I found this Robust, low-cost, auditable random number generation for embedded ...
user avatar
2 votes
2 answers
45 views

Conditioning a biased source with a block cipher?

I'm working my way through Stallings's book Cryptography and Network Security. I'm self-taught on crypto, never took a class but I've implemented some crypto accelerator functions in hardware at work ...
user avatar
  • 123
2 votes
1 answer
71 views

How much randomness to reasonably "launder" a compromised TRNG?

Assume I have a physical RNG module that generates $n$-bit random numbers that pass randomness tests such as the Dieharder suite. As it is a black box device with an unknown source of randomness, let ...
user avatar
1 vote
1 answer
86 views

When not to reject a random number generator?

I have constructed a true random number generator, and I applied the NIST randomness Test Suite to its results. I have generated around 200 files with my TRNG, each being $10^6$ bits in length. The ...
user avatar
  • 149
1 vote
1 answer
63 views

Randomness extraction on correlated data in TRNG

True random number generator (TRNG) designs I read about mostly consist of two digital stages: Low-frequency sampling (of a physical noise source) Randomness extractor The noise signal is sampled at ...
user avatar
  • 423
2 votes
1 answer
232 views

Randomness extraction from a Santha-Vazirani (semi-random) source

In a quest to better understand randomness extractors (in the context of TRNG post-processing), I read some papers about the von Neumann Extractor and Santha-Vazirani (SV-) sources. The von Neumann ...
user avatar
  • 423
4 votes
1 answer
230 views

Use of scrambler LFSR for randomness extraction of semi-random source

I am using a linear feedback shift register (LFSR) in a scrambler configuration as a randomness extractor for a weakly random source. This source is semi-random (aka. Santha-Vazirani source): the bits ...
user avatar
  • 423
4 votes
3 answers
527 views

How to compute the dataset size required by dieharder tests?

I am trying to use the dieharder random number test suite. However, this suite requires massive amount of data (this paper claims 228GB for no rewinding for every test) for most of the tests. I'd like ...
user avatar
  • 423
4 votes
2 answers
498 views

Is a LFSR sufficient for post-processing a biased TRNG?

I am building a TRNG on a FPGA based on ring oscillators. I found out that Linear Feedback Shift Registers (LFSRs) are commonly used for the post-processing of TRNGs. Here is my initial design: Let's ...
user avatar
  • 423
1 vote
1 answer
115 views

Is there any standard present to measure strength of a generated key using true random number generator?

I was wondering how to measure the security strength of a generated secret key for the below protocol: "A 128 bit random number is generated by TRNG and the random number will be used as a ...
user avatar
  • 37
13 votes
1 answer
2k views

What issues are there while using Linux's /dev/urandom for generating cryptographic keys?

As of Linux 5.1 the /dev/random no longer uses the blocking pool. There is a talk about the change on the page Removing the Linux /dev/random blocking pool I ...
user avatar
  • 43.4k
5 votes
3 answers
3k views

Why is the output of a True Random Number Generator (TRNG) insecure after it has been compressed?

I came across the following statement regarding true random number generators (TRNG): A “P1 medium” [AIS31] true random number generator (TRNG) may not be directly used due to cryptographic reasons. ...
user avatar
  • 51
-1 votes
2 answers
258 views

Will OTP provide quantum resistance under 5 conditions?

We already have quantum computing, but when quantum computing becomes commercially available there is a problem for many but not all encryption algorithm. The One-Time-Pad or OTP is the one and only ...
user avatar
  • 11
3 votes
1 answer
121 views

Hardware Gaussian random numbers for lattice-based cryptography

I have been recently reading about lattice-based cryptography. I read that a key aspect of such protocols rely on added Gaussian noise on lattices, and which therefore require highly efficient and ...
user avatar
  • 33
3 votes
1 answer
186 views

Strong RNG for encryption/authentation algo

I saw in the market several hardware options for creating strong RNG to produce strong KEYS: HSM TPM internal TRNG Intel RDSEED (TRNG)/RDRAND My questions are; What is the strength/entropy ...
user avatar
  • 253
1 vote
2 answers
115 views

What machine learning accuracy is assumed to be predictable for TRNG/PUF application?

In regular machine learning (ML) applications, usually an accuracy of greater than 95% is desired. In an ideal TRNG/PUF applications, unpredictable behavior (50% accuracy with ML models) is desired. ...
user avatar
  • 263
2 votes
1 answer
466 views

"Jitterentropy" vs CPU RDRAND in VeraCrypt 1.24

Veracrypt 1.24 just came out. It uses a true random number generator based on hardware events; namely, on CPU timing jitter, or "Jitterentropy". As an alternative to CPU RDRAND, I am a bit jittery ...
user avatar
  • 3,057
1 vote
4 answers
351 views

How can Bob quickly generate thousands of letters randomly while strongly mitigating the risk of compromise?

Bob wants to generate four thousand English letters for a proper one-time pad without resorting to hand-thrown dice, despite the advantages. Rolling dice would be too slow and tiresome. Bob does not ...
user avatar
  • 3,057
2 votes
2 answers
908 views

Is RDSEED a true RNG?

Is Intel's RDSEED a true random number generator?
user avatar
2 votes
1 answer
137 views

Mapping between NIST test and TRNG features

Each of the NIST tests are generally explained in Random Bit Generation - Guide to the Statistical Tests. I was wondering if some one can help me understand them better. For example, which tests show ...
user avatar
  • 263
3 votes
2 answers
360 views

Verifying randomness and uniqueness of TRNG output

We need to verify two claims about a set of numbers: They are random They are unique in the set (the set is about 200 billion (2TB bin storage)) Supposedly, the numbers were generated by a TRNG (...
user avatar
  • 133
1 vote
2 answers
306 views

What are known metrics for TRNG?

I was wondering what the known metrics are for studying the randomness of TRNG (besides NIST tests). For example, for PUFs, there are known metrics such as uniformity, uniqueness, BER, etc.
user avatar
  • 263
4 votes
2 answers
411 views

Usage and limitations of sponge functions for PRNG

This HRNG uses SHA3 as a sponge function (in its device driver) to inflate ots raw source output to many MByte/s. They compare this output rate to the output of other HRNG which don't use a sponge ...
user avatar
  • 287
7 votes
3 answers
1k views

Perform ENT / Dieharder on raw entropy or on whitenened entropy?

In this question about hardware random number generator, a discussion about the following question has been started: In order to test RNG's and entropy's quality, should test suites like ENT and ...
user avatar
  • 287
7 votes
3 answers
2k views

Differences between methods of hardware random number generators

I'm reading about various hardware random number generators which - among others - implement the following approaches: Analog-to-digital converter noise Johnson–Nyquist noise Reverse biased ...
user avatar
  • 287
6 votes
2 answers
385 views

Are my random numbers really "bad" or is that a statistical effect which "must" happen from time to time?

My software uses a TRNG (entropy source) which is part of an MCU. A check of random numbers generated by my software, carried out by a testing authority revealed a problem, which I have to examine ...
user avatar
  • 1,447
7 votes
2 answers
769 views

Random number generator issue

I wrote a litte random generator using a geiger tube. I use a 16bit timer that overflows every ~1ms; when i get a reading form the geiger (~36count/minute), i save the current timer value as "random ...
user avatar
  • 181
4 votes
3 answers
841 views

What is proper use of a True Random Number Generator?

Let's say I have a true random number generator TRNG. Random numbers are generated on demand from a HW-entropy source, resulting in a 32-bit random value each time it is called. I have to fill an ...
user avatar
  • 1,447
0 votes
2 answers
635 views

Algorithm to generate ECDSA keys with random number generator

I have a certified random number generator (TRNG, it does not matter what it is for the question). I would like to use it as a source to generate secp384r1 ECDSA keys. What is the algorithm I should ...
user avatar
4 votes
2 answers
1k views

Public Randomness-Based Random Number Generator using Mobile Phone?

I have an idea to create a True Random Number Generator that use randomness source from a smartphone sensors. My idea is to collect sensors data from a lot of smartphone using mobile apps and then the ...
user avatar
1 vote
2 answers
476 views

Open-source usb TRNG and US standards - Help choosing [closed]

I came across the ChaosKey and I remember the time I came accros the entrypy key that was always out of stock. I would really want one to play with, I would like the best open source I can get for ...
user avatar
1 vote
3 answers
238 views

Digital Certificates genereted from Hardware Security Module

Software library without hardware based source of entropy will provide enough security to generate digital certificates. However Hardware security Modules provide hardware based source of entropy and ...
user avatar
  • 1,998
7 votes
4 answers
3k views

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

In a recent answer to a question about CSPRNGs, it was stated that… Nondeterministic algorithms where there is no such requirement, and ideally could be replaced by a true random generator. Example: ...
user avatar
  • 17.4k