On the Entropy of Oscillator-Based True Random Number Generators

True random number generators (TRNGs) are essential for cryptographic systems, and they are usually evaluated by the concept of entropy. In general, the entropy of a TRNG is estimated from its stochastic model, and reflected in the statistical results of the generated raw bits. Oscillator-based TRNGs are widely used in practical cryptographic systems due to its elegant structure, and its stochastic model has been studied in different aspects. In this paper, we investigate the applicability of the different entropy estimation methods for oscillator-based TRNGs, including the bit-rate entropy, the lower bound and the approximate entropy. Particularly, we firstly analyze the two existing stochastic models (one of which is phase-based and the other is time-based), and deduce consistent bit-rate entropy results from these two models. Then, we design an approximate entropy calculation method on the output raw bits of a simulated oscillator-based TRNG, and this statistical calculation result well matches the bit-rate entropy from stochastic models. In addition, we discuss the extreme case of tiny randomness where some methods are inapplicable, and provide the recommendations for these entropy evaluation methods. Finally, we design a hardware verification method in a real oscillator-based TRNG, and validate these estimation methods in the hardware platform.

[1]  Gwilym M. Jenkins,et al.  Time series analysis, forecasting and control , 1971 .

[2]  Yuan Ma,et al.  Entropy Evaluation for Oscillator-Based True Random Number Generators , 2014, CHES.

[3]  Werner Schindler,et al.  A Design for a Physical RNG with Robust Entropy Estimators , 2008, CHES.

[4]  Alfred Menezes,et al.  Handbook of Applied Cryptography , 2018 .

[5]  Elaine B. Barker,et al.  A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications , 2000 .

[6]  David Lubicz,et al.  On the Security of Oscillator-Based Random Number Generators , 2011, Journal of Cryptology.

[7]  Viktor Fischer,et al.  On the assumption of mutual independence of jitter realizations in P-TRNG stochastic models , 2014, 2014 Design, Automation & Test in Europe Conference & Exhibition (DATE).

[8]  Masanori Hashimoto,et al.  A Worst-Case-Aware Design Methodology for Noise-Tolerant Oscillator-Based True Random Number Generator With Stochastic Behavior Modeling , 2013, IEEE Transactions on Information Forensics and Security.

[9]  Viktor Fischer,et al.  Embedded Evaluation of Randomness in Oscillator Based Elementary TRNG , 2014, CHES.

[10]  George E. P. Box,et al.  Time Series Analysis: Forecasting and Control , 1977 .

[11]  Viktor Fischer,et al.  Characterization of randomness sources in ring oscillator-based true random number generators in FPGAs , 2010, 13th IEEE Symposium on Design and Diagnostics of Electronic Circuits and Systems.