摘要
随机数发生器(random number generator,RNG)在现代密码学中发挥着不可替代的作用,其生成随机数的不可预测性为密码算法和安全协议等密码应用提供基本的安全保障.一旦随机数的质量无法满足预期,则会导致密码应用存在严重的安全性风险.从RNG设计和检测的角度,对RNG的研究工作进行了全面系统的调研总结.在设计和实现方面,介绍了硬件和软件形式的TRNG研究工作;在检测方面,介绍了黑盒统计检测、熵估计方法和在线测试等RNG检测技术的研究进展.
Random number generator(RNG)is indispensable for modern cryptography.The unpredictability of the generated random number provides basic security for cryptographic applications,such as cryptographic algorithms and security protocols.Once the quality of the random number cannot satisfy the security requirements as expected,it may lead to the existing of serious security risks in these applications.In this paper,it gives a systematic investigation and summary for the studies of RNGs from the view of design,and testing.On the design and implementation aspect,we introduce the researches on the hardware TRNGs and software TRNGs.On the testing aspect,it includes the research progress of RNG(black-box)statistical tests,entropy estimation and online tests.
作者
马原
陈天宇
吴鑫莹
杨静
林璟锵
荆继武
Ma Yuan;Chen Tianyu;Wu Xinying;Yang Jing;Lin Jingqiang;Jing Jiwu(Data Assurance and Communication Security Research Center,Chinese Academy of Sciences,Beijing 100093;State Key Laboratory of Information Security (Institute of Information Engineering,Chinese Academy of Sciences),Beijing 100093;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049)
出处
《信息安全研究》
2019年第1期39-49,共11页
Journal of Information Security Research
基金
国家自然科学基金项目(61602476
61772518
61872357
61802396)
"十三五"国家密码发展基金项目(MMJJ20170205
MMJJ20180113)
关键词
随机数发生器
设计
实现
熵评估
统计测试
random number generator(RNG)
design
implementation
entropy estimation
statistical test
