Random number generation standards

From Randomness for cryptography
Jump to navigation Jump to search

A variety of standards have been issued dealing with random number generation for cryptography. These include:

  • RFC 4086 Randomness Recommendations for Security (Replaces the earlier RFC 1750) IETF suggested practice
  • NIST SP 800-90 Currently (2014) being revised [1]
    • 800-90A Recommendation for Random Number Generation Using Deterministic Random Bit Generators, 2012
    • 800-90 A Rev. 1: Recommendation for Random Number Generation Using Deterministic Random Bit Generators
    • 800-90 B: Recommendation for the Entropy Sources Used for Random Bit Generation
    • 800-90 C: Recommendation for Random Bit Generator (RBG) Constructions
  • Common Criteria "In the Common Criteria world, especially for smart cards, BSI’s AIS31 TRNG requirements are pretty much the high end of evaluated TRNGs and effectively mandated for smart cards under the German CC scheme:"[2]
    • AIS31 True random number generators [3]
    • AIS20 Deterministic random number generators
  • ANSI X9.31 standards for generating random numbers
  • Nevada Gamming Commission reportedly has recommendations on RNG for gaming machines

Glossary

  • ANSI -- American National Standards Institute (private standards organization)
  • BSI -- Bundesamt für Sicherheit in der Informationstechnik (Federal office for security in information technology), Bonn
  • NIST -- National Institute for Standards and Technology (U.S. Government)
  • TOE -- Target of Evaluation
  • TRNG -- True random number generator

References