On Thursday, August 12, 2021, 01:32:06 PM PDT, coderman <[email protected]> wrote: > https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng
Very interesting and useful. However, that article didn't seem to distinguish between various kinds of RNG. Radioactive decay, or perhaps digitization of white-noise, etc. If they are merely hashing and re-hashing some value, I suppose that could be very bad. If they are seeding the RNG with other, unpredictable bits (like keypresses, etc), that could be a bit better. I just did a google search for 'hardware rng' and got this ad: https://www.idquantique.com/random-number-generation/products/quantis-qrng-chip/?utm_source=google_ads_search&utm_medium=cpc&gclid=CjwKCAjwjdOIBhA_EiwAHz8xm1tHp6b2yb2Iun1tXPVG6sUIwzwCvWgyHNlJFHpHLNAcj2c_Bx23dBoCBfMQAvD_BwE ID Quantique introduces its true Quantum Random Number Generator (QRNG) Chip, which offers the highest attainable security and robustness for the generation of random bits. It is ideal for use in the automotive, computing, critical infrastructure, IoT, mobile and security applications where compact size and resistance to external environmental perturbations are critical. IDQ’s QRNG chip is available in three models, depending on size, performance, power consumption and certifications, in order to fit various industry-specific needs. Quantis QRNG IDQ250C2 is the first Quantum Random Number Generator designed and manufactured specifically for mobile handsets, IoT and edge devices. Mobile applications today require the collection and transmission to handsets of more and more sensitive data including financial, health, business and personal information. IoT and edge devices are now connecting home, hospitals, factories, infrastructure, schools and shopping locations, rising the need for security to the edge. With its low profile, compact size and low power consumption, IDQ250C2 is ideal for securing the collection and transfer of sensitive data at the edge. Quantis QRNG IDQ6MC1 is ideal for applications where resistance to external environmental perturbations are critical. It has obtained AEC-Q100 certification, demonstrating it can reliably be embedded in any security system of a connected car to ensure trusted and secured in-vehicle and V2X communications. The need to exchange data between back-end systems and vehicles – as well as between vehicles directly – makes these systems vulnerable to cyber-attacks, which could lead to expensive vehicle recalls, significant safety risks and threats to human life. In turn, this exposes vehicle manufacturers and organizations tasked with infrastructure management to substantial liability risks. Quantis QRNG IDQ20MC1 has the highest entropy throughput and can serve multiple security applications with true and unpredictable randomness. It can be easily embedded in computers, laptops, servers or any security devices. As the IDQ6MC1, it embeds DRBG postprocessing, compliant with NIST SP800-90 A/B/C recommendations. Based on a technology concept and patent from IDQ, Quantis QRNG chips harness true quantum randomness from the shot noise of a light source captured by a CMOS image sensor. Only Quantum RNGs are intrinsically random, provably secure and future proof. Quantum physics is probabilistic on a fundamental level, which means that they can produce unpredictable outcomes in a robust, transparent and well controlled way. Since the entropy source is described with fundamental models, all properties of the entropy source are understood, and the security can be proven. Additionally, Quantis QRNG chips provide full entropy instantaneously from the very first bit. [end of quote]
