[Cryptech Tech] Some measurement results for FPGA with avalanche entropy source

Joachim Strömbergson joachim at secworks.se
Sat Sep 6 16:25:17 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Aloha!

Bernd Paysan wrote:
> The internal ROs won't pass dieharder without additional stuff, due
> to the bias.

That isn't the plan either. We will probably have entropy access ports
even in the first iteration. But I assume Randy meant being able to run
Dieharder on the output from the csprng. Just to be able to show that we
can deliver a working TRNG.


> I've been thinking about mixing them all together through one LSR, 
> which would work like this, with ro being 32 ring oscillator outputs
> (flip- flops, sampled each cycle):
> 
> reg [31:0] mix;
> 
> always @(posedge clk) mix <= ro ^ { mix[30:0], ~mix[31] };
> 
> and sampling mix every multiple of 64 cycles (better accumulate for
> 128 cycles).
> 
> This function eliminates biases (after 64 rounds, we have 32 inverted
> and 32 non-inverted samples xored together in each bit), and still is
> simple enough that all real failures of the ring oscillators (like
> aligned oscillation or insufficient jitter) will show up.

Cool. I'll try to implement and test that.

- -- 
Med vänlig hälsning, Yours

Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
 Joachim Strömbergson          Secworks AB          joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=gFZ+
-----END PGP SIGNATURE-----


More information about the Tech mailing list