[Cryptech Tech] Some measurement results for FPGA with avalanche entropy source
Joachim Strömbergson
joachim at secworks.se
Sat Sep 6 16:25:17 UTC 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Aloha!
Bernd Paysan wrote:
> The internal ROs won't pass dieharder without additional stuff, due
> to the bias.
That isn't the plan either. We will probably have entropy access ports
even in the first iteration. But I assume Randy meant being able to run
Dieharder on the output from the csprng. Just to be able to show that we
can deliver a working TRNG.
> I've been thinking about mixing them all together through one LSR,
> which would work like this, with ro being 32 ring oscillator outputs
> (flip- flops, sampled each cycle):
>
> reg [31:0] mix;
>
> always @(posedge clk) mix <= ro ^ { mix[30:0], ~mix[31] };
>
> and sampling mix every multiple of 64 cycles (better accumulate for
> 128 cycles).
>
> This function eliminates biases (after 64 rounds, we have 32 inverted
> and 32 non-inverted samples xored together in each bit), and still is
> simple enough that all real failures of the ring oscillators (like
> aligned oscillation or insufficient jitter) will show up.
Cool. I'll try to implement and test that.
- --
Med vänlig hälsning, Yours
Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
Joachim Strömbergson Secworks AB joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=gFZ+
-----END PGP SIGNATURE-----
More information about the Tech
mailing list