{"id":423,"date":"2022-01-05T03:16:00","date_gmt":"2022-01-05T03:16:00","guid":{"rendered":"https:\/\/www.pufsecurity.com\/?post_type=technology&p=423"},"modified":"2024-06-26T02:37:12","modified_gmt":"2024-06-26T02:37:12","slug":"trng","status":"publish","type":"technology","link":"https:\/\/www.pufsecurity.com\/zh-hans\/technology\/trng\/","title":{"rendered":"TRNG\u00a0\u00a0"},"content":{"rendered":"\n

Random Number Entropy<\/h2>\n\n\n\n

Algorithms that generate random numbers are vital in modern computing and play a role in everything from video games to secure internet browsing. We generally define two categorizations of random numbers, \u201dtrue\u201d and \u201dpseudo.\u201d<\/p>\n\n\n\n

Pseudo-random numbers are not hardware-based (derived from a random physical process) and instead use, for example, a seed number and an algorithm to produce numbers that appear to be random. This is perfectly fine within a computer game but becomes an easily exploitable weak link when used for encryption and decryption.<\/p>\n\n\n\n

Generic Structure<\/h3>\n\n\n\n

True Random Number Generators or TRNGs take this to the hardware level as a physical process. Typically, they generate random numbers from one or several entropy sources. This provides the \u201ctrue\u201d randomness from environmental noises or anything that operates with randomness in nature, such as the decay of a radioactive atom.<\/p>\n\n\n\n

\"Generic<\/figure>\n\n\n\n

However, an entropy source is typically an analog signal due to practical limitations of digital semiconductor design. Therefore, a digitization circuit is necessary to sample the time-variant randomness of these entropy sources and convert the analog signal into digits for the modern CPU system. The digital signal sampled from the entropy source is called raw entropy. However, the raw entropy is not always ideally random. There may be some bias in the entropy sources or digitization circuit, which means the Hamming Weight (the ratio between the number of bit zero and bit one), may not be close to 50%. In other words, not perfectly random.  <\/p>\n\n\n\n

To improve the quality of raw entropy, we may need to post-processing to convert it into useable random numbers, such as using helper data. Alternatively, this process can be done from within the chip using a Quantum Tunneling<\/a> PUF as an entropy source and removing the need for helper data.<\/p>\n\n\n\n

Regulations<\/h3>\n\n\n\n

The security strength of many systems and applications depends on a high-quality RNG. The National Institute of Standards and Technology (NIST) has proposed in document NIST SP800- 90C the construction of a qualified RNG that combines true random number seeds, deterministic random bit generators, and post-processing algorithms. However, a true high-quality random seed is hard to design. An entropy source must provide ideal randomness and be derived from physical sources. Moreover, according to NIST regulations, four separate entropy sources are needed to construct a fully qualified true random number generator (TRNG).<\/p>\n\n\n\n

Live seeds should be modified by an approved post-processing method before an application uses them to enhance security strength. The counter mode of the advanced encryption standard (AES-CTR) and hash (SHA2-256) function are the two post-processing algorithms used most frequently.<\/p>\n","protected":false},"excerpt":{"rendered":"

True Random Number Generators or TRNGs take this to the hardware level as a physical process. Typically, they generate random numbers from one or several entropy sources. <\/p>\n","protected":false},"author":3,"featured_media":3092,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"subjects":[226],"tech-tag":[231],"class_list":["post-423","technology","type-technology","status-publish","has-post-thumbnail","hentry","subjects-physical-macros","tech-tag-foundational-technology"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/technology\/423"}],"collection":[{"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/technology"}],"about":[{"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/types\/technology"}],"author":[{"embeddable":true,"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/comments?post=423"}],"version-history":[{"count":12,"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/technology\/423\/revisions"}],"predecessor-version":[{"id":6992,"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/technology\/423\/revisions\/6992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/media\/3092"}],"wp:attachment":[{"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/media?parent=423"}],"wp:term":[{"taxonomy":"subjects","embeddable":true,"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/subjects?post=423"},{"taxonomy":"tech-tag","embeddable":true,"href":"https:\/\/www.pufsecurity.com\/zh-hans\/wp-json\/wp\/v2\/tech-tag?post=423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}