Skip to main content
34 votes

Why is the output of a True Random Number Generator (TRNG) insecure after it has been compressed?

I think you're misinterpreting the source. The source says the TRNGs "rely" on compression (a cryptographic hash would be the compression function, or possibly some simpler function to ...
Serpent27's user avatar
  • 1,461
12 votes
Accepted

What issues are there while using Linux's /dev/urandom for generating cryptographic keys?

Using /dev/urandom to generate cryptographic keys or secrets can be an issue when the state of the OS is not unique. This is the typically case when a VM was just ...
A. Hersean's user avatar
10 votes
Accepted

Doing OTP two or more times with a biased TRNG: Will this have the same security as if was done with a non-biased TRNG?

Better than using it once, but not as good as an unbiased TRNG. To see this, suppose our TRNG is very biased, producing a zero 10% of the time and an one 90% of the time. If we use the TRNG twice, for ...
Eugene Styer's user avatar
  • 1,676
8 votes

Are my random numbers really "bad" or is that a statistical effect which "must" happen from time to time?

One of the failing test discussed in the question was coded for the purpose. It could be useful to validate that code using a known-good pseudo-random source (the output of SHA-256 for incremental ...
fgrieu's user avatar
  • 142k
8 votes
Accepted

Random number generator issue

Both ent tests distinguish the files from random data with high confidence (99.84% for the bit test, >99.99% for the byte test). That follows from the "randomly ...
fgrieu's user avatar
  • 142k
8 votes

Will OTP provide quantum resistance under 5 conditions?

That sounds more difficult than it is in fact. You could build one using light, heath, or a semiconductor that will produce certified noise but it will never be NIST certified. (But that is obviously ...
Maarten Bodewes's user avatar
  • 93.2k
8 votes

Doing OTP two or more times with a biased TRNG: Will this have the same security as if was done with a non-biased TRNG?

The convergence of your suggested process towards unbiased bits is guided by the Piling Up Lemma. It will be slow. It is more efficient to use unbiasing procedures such as von Neumann unbiasing. See ...
kodlu's user avatar
  • 22.8k
7 votes
Accepted

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

There seems to be a lot of confusing terminology here. Let me define everything to the best of my knowledge. RNG: Some mechanism that produces random numbers. CSRNG: An RNG that is safe for ...
Daffy's user avatar
  • 2,409
7 votes

Differences between methods of hardware random number generators

The Electrical Engineering SE would be a good resource for questions about specific sources of noise. Which method is best is not a a question for which you will find a good answer to. The "quality" ...
Future Security's user avatar
7 votes
Accepted

Are the null bytes produced by a True Random Number Generator a security issue when using it as a source of entropy for keys in One-time pad?

Nope. They happen naturally. And if they didn't, you should be worried as it would indicate that your generator isn't working properly. If your generator is really random, all digits have an equal ...
Paul Uszak's user avatar
  • 15.6k
6 votes

Is RDSEED a true RNG?

Yes, RDSEED is a true random number generator. From Wikipedia: The entropy source for the RDSEED instruction runs asynchronously on a self-timed circuit and uses thermal noise within the silicon ...
AleksanderCH's user avatar
  • 6,462
6 votes
Accepted

Perform ENT / Dieharder on raw entropy or on whitenened entropy?

It depends on the goal of performing the test: If the goal is to test for a problem in the whitening, then the test should be run on the whitened output, of course. If the test fails (more often than ...
fgrieu's user avatar
  • 142k
6 votes

Random number generator issue

We can't tell how you get from a binary 16 bit timer to a file full of bits. Have you simply stored the timer values? I'm assuming that the file type is wrong though, in that the files are actually ...
Paul Uszak's user avatar
  • 15.6k
5 votes

Open-source usb TRNG and US standards - Help choosing

If you fish around in your pocket, you can probably find one that costs 0.25 USD. All it takes to use one of these gizmos is a little patience, a bit of hand-eye coordination, and some confidence ...
Squeamish Ossifrage's user avatar
5 votes
Accepted

What is proper use of a True Random Number Generator?

I assume your TRNG has a uniform distribution and can generate all possible 32bit numbers (ie. isn't limited to a specific smaller number range, just to [0,2^32-1]). In this case, it doesn't really ...
kd903oimsdklf's user avatar
5 votes

Usage and limitations of sponge functions for PRNG

I'd say the comparison table is not a fair one, as it compares the Infinite Noise generator's throughput when feeding bits into a CSPRNG (Keccak) running on the host workstation and then running that ...
rmalayter's user avatar
  • 2,297
5 votes
Accepted

Is a LFSR sufficient for post-processing a biased TRNG?

I'll assume the right 16 in the question's figure is to tell that the LFSR is unloaded 16 bits at a time; and unless otherwise stated I'll assume that's done every 16 clock cycles of the LFSR. Is the ...
fgrieu's user avatar
  • 142k
5 votes

How to compute the dataset size required by dieharder tests?

I'll be so bold as to say that no one knows for sure how much data you really need. There is no guidance on the homepage, the manpage and this thread from Duke is equally unspecific. Anecdotal ...
Paul Uszak's user avatar
  • 15.6k
5 votes
Accepted

Good entropy from entropy test (90B) but still fail NIST800-22

The question tells that "95/100" of failed tests are Nonoverlapping tests. I previously pointed that's a significant statistical anomaly†, and it couldn't have been correctly tested a good ...
fgrieu's user avatar
  • 142k
4 votes
Accepted

Verifying randomness and uniqueness of TRNG output

There is no such thing as a random number and as such it is a category error to attempt to verify whether a particular set of numbers is ‘random’. There are random generators of numbers; the relevant ...
Squeamish Ossifrage's user avatar
4 votes

Perform ENT / Dieharder on raw entropy or on whitenened entropy?

Ideally a whitening algorithm passes data through cryptographic algorithms, rather than doing something simple (like Von-Neumann's unfair coin de-biasing algorithm or reading the least significant bit ...
Future Security's user avatar
4 votes
Accepted

Usage and limitations of sponge functions for PRNG

The only reason to use /dev/random is to wait until the system has loaded entropy. If you have waited once, it is generally safe to use /dev/urandom. It has nothing whatsoever to do with speed of ...
Squeamish Ossifrage's user avatar
4 votes

Are the null bytes produced by a True Random Number Generator a security issue when using it as a source of entropy for keys in One-time pad?

No. Any byte value should have about the same probability, assuming a uniform distribution. If some kind of value, including a "null" byte with all the bits set to zero, is absent then you'd ...
Maarten Bodewes's user avatar
  • 93.2k
4 votes

Are TRNGs used in low power devices? Why?

TRNGs are better than cryptographic algorithms that generate pseudo-random numbers (PRNGs) because these algorithms are more energy intensive than TRNGs Random number generation in IoT devices is ...
aiootp's user avatar
  • 814
4 votes

Are TRNGs used in low power devices? Why?

Without boring you with the actual hardware details, IoT devices do not generally have the classic entropy pools that exist in modern OSes. IoT is also a broadly loaded term, as I can make two ...
b degnan's user avatar
  • 4,880
3 votes

Is RDSEED a true RNG?

Intel says it is a true RNG, and so do people who've looked at the design details Intel shared with them. The possibility of it not being a true RNG are basically limited to NSA interference and a big ...
Peter Cordes's user avatar
3 votes
Accepted

Differences between methods of hardware random number generators

Treating each in turn without too much electronics stuff:- Analog-to-digital converter noise Better known as quantization noise, is very simple as you can just leave an ADC input floating and the ...
Paul Uszak's user avatar
  • 15.6k
3 votes

What are known metrics for TRNG?

The one metric that generically matters in cryptography for a physical entropy source is the min-entropy: the exponent of the most probable outcome, in bits. This depends on the physics of the ...
Squeamish Ossifrage's user avatar
3 votes

Are my random numbers really "bad" or is that a statistical effect which "must" happen from time to time?

How many patterns are you testing? If you are looking for many different patterns. It is expected that at least one of them would be more common. Normally we want the p value to be small to show an ...
Meir Maor's user avatar
  • 11.8k
3 votes

What is proper use of a True Random Number Generator?

The contract of a true random number generator is that: Every bit it outputs has an equal chance of being a zero as a one; Knowledge of the values of any of the bits it has output in the past is of ...
Luis Casillas's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible