[Cryptech Tech] Noise board on Novena
Fredrik Thulin
fredrik at thulin.net
Wed Sep 24 07:02:35 UTC 2014
On Saturday, September 20, 2014 11:18:00 AM Benedikt Stockebrand wrote:
...
> > We haven't gotten to sort of specifying what quality the FPGA will
> > expect/require from the external entropy source(s). I'd say it probably
> > won't be "must be perfectly random", but I don't know how we will define
> > it.
> >
> > As food for thought, maybe the spec would be something like "must give a
> > Monte Carlo test value of less than 0.1% in 100k readings" (I totally
> > just made up those numbers).
>
> As I mentioned before, to my understanding that makes testing/auditing
> significantly more difficult. But yes, we definitely have to work on
> that some time.
To clarify, I think such a requirement would be a written requirement directed
to the designers of 3rd party entropy sources, not an FPGA enforced one. It is
my understanding too that it is rather expensive to implement statistical
tests over long series of output from the entropy sources in the FPGA.
I think the always-running tests of the entropy sources will be limited to
making sure they are not stuck at some value, and maybe a test to make sure
the overall distribution of 0 and 1 bits are somewhat close to 50%.
/Fredrik
More information about the Tech
mailing list