Questions tagged [trng]
A TRNG (True Random Number Generator) is hardware that uses nondeterministic physical processes to randomly generate numbers.
46
questions
3
votes
1
answer
217
views
RSA/ ECC keygen HW vs SW
i have a pretty straightforward question but i can’t seem to find an answer :
Regardless of the physical protection provided by an HSM or TPM or any hardware cryptographic key storage system, are keys ...
- 51
4
votes
4
answers
199
views
Are TRNGs used in low power devices? Why?
I read somewhere that TRNGs are better than cryptographic algorithms that generate pseudo-random numbers (PRNGs) because these algorithms are more energy intensive than TRNGs.
By low power devices, I ...
4
votes
2
answers
765
views
What are the state-of-the-art TRNGs today?
How fast are the fastest ones? Which ones have the most entropy? Which ones are the most practical ones?
I tried looking for answers on Wikipedia and also, I tried reading papers, but I am couldn’t ...
1
vote
2
answers
726
views
Are the null bytes produced by a True Random Number Generator a security issue when using it as a source of entropy for keys in One-time pad?
I can see that True Random Number Generators can produce some null bytes, after some megabytes of data, even 2 consecutive null bytes are produced:
...
- 379
4
votes
2
answers
133
views
XOR for more TRNG data?
If I have TRNG data as input (A1,A2,B1,B2,C1,C2) - can I xor it to provide more TRNG data A,B,C,D,E,F,G,H ?
...
- 41
2
votes
2
answers
222
views
Good entropy from entropy test (90B) but still fail NIST800-22
I designed my TRNG with FPGA. My TRNG has a good entropy performance with a value of 0.99x over several test times. But for the NIST800-22, during several run times, sometimes my sequence passes all ...
- 23
1
vote
1
answer
76
views
Could I Use a Hash Function to Help Generate Cryptographic Key
If I had a true random number generator that had a fault where 10-20% of the bits never change (these bits always produced the same value every time the TRNG was called), could I feed the result of ...
- 13
1
vote
1
answer
204
views
Where can I find a comprehensive guide to running the NIST SP800-90B_EntropyAssessment?
I am already using the 2 they suggest :
https://github.com/usnistgov/SP800-90B_EntropyAssessment https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf
but, here is where I run into ...
4
votes
3
answers
945
views
Hotbits vs. Random.org vs. Anything else?
I was searching for a random seed to use with a pseudo-random number generator (not trying to encrypt anything). I went to the following web sites:
https://www.fourmilab.ch/hotbits/secure_generate....
- 185
2
votes
3
answers
1k
views
Doing OTP two or more times with a biased TRNG: Will this have the same security as if was done with a non-biased TRNG?
Let's suppose I want to do One-Time-Pad but I only have a biased true random number generator (TRNG).
I XOR to the ciphertext block with another with random data got from the TRNG, e repeat the ...
- 877
2
votes
1
answer
181
views
Observations about ENT's Chi Squared test on my own RNG—and HotBits's score
Basic question: ENT seems to trip up generators that pass NIST 800-22 and maybe even dieharder. How do the latter two test suites miss such an obvious failure?
There are two things I want to mention ...
- 59
1
vote
1
answer
112
views
Can we apply the Pseudo Random Number (PRNG) as post processing method for True Random Number (TRNG)?
From the NIST SP 800-90B, we can use these cryptographic algorithms (HMAC, AES, Hash function) as a post-processing technique for TRNG.
Besides that, can we apply the Pseudo Random Number (PRNG) as a ...
- 83
2
votes
1
answer
351
views
Post processing method for True Random Number Generator
I am finding the post-processing method to improve the randomness of the True Random Number Generator. Especially, TRNG can pass the NIST SP 800-22 after applying the post-processing.
I tried to apply ...
- 83
3
votes
1
answer
144
views
DIY TRNG on an embedded system for Ethereum private key generation
I'm trying to build this Ethereum hardware wallet on a custom designed embedded system and I'm no expert. Googling around I found this Robust, low-cost, auditable random number generation
for embedded ...
2
votes
2
answers
63
views
Conditioning a biased source with a block cipher?
I'm working my way through Stallings's book Cryptography and Network Security. I'm self-taught on crypto, never took a class but I've implemented some crypto accelerator functions in hardware at work ...
- 123
2
votes
1
answer
81
views
How much randomness to reasonably "launder" a compromised TRNG?
Assume I have a physical RNG module that generates $n$-bit random numbers that pass randomness tests such as the Dieharder suite. As it is a black box device with an unknown source of randomness, let ...
- 23
1
vote
1
answer
127
views
When not to reject a random number generator?
I have constructed a true random number generator, and I applied the NIST randomness Test Suite to its results. I have generated around 200 files with my TRNG, each being $10^6$ bits in length.
The ...
- 149
1
vote
1
answer
99
views
Randomness extraction on correlated data in TRNG
True random number generator (TRNG) designs I read about mostly consist of two digital stages:
Low-frequency sampling (of a physical noise source)
Randomness extractor
The noise signal is sampled at ...
- 453
2
votes
1
answer
280
views
Randomness extraction from a Santha-Vazirani (semi-random) source
In a quest to better understand randomness extractors (in the context of TRNG post-processing), I read some papers about the von Neumann Extractor and Santha-Vazirani (SV-) sources. The von Neumann ...
- 453
4
votes
0
answers
368
views
Use of scrambler LFSR for randomness extraction of semi-random source
I am using a linear feedback shift register (LFSR) in a scrambler configuration as a randomness extractor for a weakly random source. This source is semi-random (aka. Santha-Vazirani source): the bits ...
- 453
5
votes
4
answers
1k
views
How to compute the dataset size required by dieharder tests?
I am trying to use the dieharder random number test suite.
However, this suite requires massive amount of data (this paper claims 228GB for no rewinding for every test) for most of the tests. I'd like ...
- 453
4
votes
2
answers
749
views
Is a LFSR sufficient for post-processing a biased TRNG?
I am building a TRNG on a FPGA based on ring oscillators. I found out that Linear Feedback Shift Registers (LFSRs) are commonly used for the post-processing of TRNGs. Here is my initial design:
Let's ...
- 453
1
vote
1
answer
130
views
Is there any standard present to measure strength of a generated key using true random number generator?
I was wondering how to measure the security strength of a generated secret key for the below protocol:
"A 128 bit random number is generated by TRNG and the random number will be used as a ...
- 37
13
votes
1
answer
2k
views
What issues are there while using Linux's /dev/urandom for generating cryptographic keys?
As of Linux 5.1 the /dev/random no longer uses the blocking pool. There is a talk about the change on the page Removing the Linux /dev/random blocking pool
I ...
- 47.6k
5
votes
3
answers
3k
views
Why is the output of a True Random Number Generator (TRNG) insecure after it has been compressed?
I came across the following statement regarding true random number generators (TRNG):
A “P1 medium” [AIS31] true random number generator (TRNG) may not be directly used due to cryptographic reasons. ...
- 51
-1
votes
2
answers
362
views
Will OTP provide quantum resistance under 5 conditions?
We already have quantum computing, but when quantum computing becomes commercially available there is a problem for many but not all encryption algorithm.
The One-Time-Pad or OTP is the one and only ...
- 11
3
votes
1
answer
152
views
Hardware Gaussian random numbers for lattice-based cryptography
I have been recently reading about lattice-based cryptography.
I read that a key aspect of such protocols rely on added Gaussian noise on lattices, and which therefore require highly efficient and ...
- 33
3
votes
1
answer
262
views
Strong RNG for encryption/authentation algo
I saw in the market several hardware options for creating strong RNG to produce strong KEYS:
HSM
TPM internal TRNG
Intel RDSEED (TRNG)/RDRAND
My questions are;
What is the strength/entropy ...
- 283
1
vote
2
answers
130
views
What machine learning accuracy is assumed to be predictable for TRNG/PUF application?
In regular machine learning (ML) applications, usually an accuracy of greater than 95% is desired.
In an ideal TRNG/PUF applications, unpredictable behavior (50% accuracy with ML models) is desired. ...
- 263
2
votes
1
answer
621
views
"Jitterentropy" vs CPU RDRAND in VeraCrypt 1.24
Veracrypt 1.24 just came out. It uses a true random number generator based on hardware events; namely, on CPU timing jitter, or "Jitterentropy".
As an alternative to CPU RDRAND, I am a bit jittery ...
- 3,102
1
vote
4
answers
395
views
How can Bob quickly generate thousands of letters randomly while strongly mitigating the risk of compromise?
Bob wants to generate four thousand English letters for a proper one-time pad without resorting to hand-thrown dice, despite the advantages. Rolling dice would be too slow and tiresome.
Bob does not ...
- 3,102
3
votes
3
answers
2k
views
2
votes
1
answer
159
views
Mapping between NIST test and TRNG features
Each of the NIST tests are generally explained in Random Bit Generation - Guide to the Statistical Tests. I was wondering if some one can help me understand them better. For example, which tests show ...
- 263
4
votes
2
answers
457
views
Verifying randomness and uniqueness of TRNG output
We need to verify two claims about a set of numbers:
They are random
They are unique in the set (the set is about 200 billion (2TB bin storage))
Supposedly, the numbers were generated by a TRNG (...
- 143
1
vote
2
answers
405
views
What are known metrics for TRNG?
I was wondering what the known metrics are for studying the randomness of TRNG (besides NIST tests). For example, for PUFs, there are known metrics such as uniformity, uniqueness, BER, etc.
- 263
4
votes
2
answers
513
views
Usage and limitations of sponge functions for PRNG
This HRNG uses SHA3 as a sponge function (in its device driver) to inflate ots raw source output to many MByte/s. They compare this output rate to the output of other HRNG which don't use a sponge ...
- 287
7
votes
3
answers
2k
views
Perform ENT / Dieharder on raw entropy or on whitenened entropy?
In this question about hardware random number generator, a discussion about the following question has been started: In order to test RNG's and entropy's quality, should test suites like ENT and ...
- 287
7
votes
3
answers
2k
views
Differences between methods of hardware random number generators
I'm reading about various hardware random number generators which - among others - implement the following approaches:
Analog-to-digital converter noise
Johnson–Nyquist noise
Reverse biased ...
- 287
6
votes
2
answers
450
views
Are my random numbers really "bad" or is that a statistical effect which "must" happen from time to time?
My software uses a TRNG (entropy source) which is part of an MCU.
A check of random numbers generated by my software, carried out by a testing authority revealed a problem, which I have to examine ...
- 1,477
7
votes
2
answers
866
views
Random number generator issue
I wrote a litte random generator using a geiger tube. I use a 16bit timer that overflows every ~1ms;
when i get a reading form the geiger (~36count/minute), i save the current timer value as "random ...
- 181
4
votes
3
answers
972
views
What is proper use of a True Random Number Generator?
Let's say I have a true random number generator TRNG. Random numbers are generated on demand from a HW-entropy source, resulting in a 32-bit random value each time it is called.
I have to fill an ...
- 1,477
0
votes
2
answers
835
views
Algorithm to generate ECDSA keys with random number generator
I have a certified random number generator (TRNG, it does not matter what it is for the question).
I would like to use it as a source to generate secp384r1 ECDSA keys. What is the algorithm I should ...
- 563
4
votes
2
answers
1k
views
Public Randomness-Based Random Number Generator using Mobile Phone?
I have an idea to create a True Random Number Generator that use randomness source from a smartphone sensors. My idea is to collect sensors data from a lot of smartphone using mobile apps and then the ...
- 49
1
vote
2
answers
498
views
Open-source usb TRNG and US standards - Help choosing [closed]
I came across the ChaosKey and I remember the time I came accros the entrypy key that was always out of stock. I would really want one to play with, I would like the best open source I can get for ...
- 209
1
vote
3
answers
265
views
Digital Certificates genereted from Hardware Security Module
Software library without hardware based source of entropy will provide enough security to generate digital certificates. However Hardware security Modules provide hardware based source of entropy and ...
- 2,397
7
votes
4
answers
3k
views
When is an RNG a CSPRNG, a CSRNG, or a TRNG?
In a recent answer to a question about CSPRNGs, it was stated that…
Nondeterministic algorithms where there is no such requirement, and ideally could be replaced by a true random generator. Example: ...
- 17.8k