[Cryptography] TRNG review: Arduino based TRNGs

dj at deadhat.com dj at deadhat.com
Tue Jan 12 15:45:24 EST 2016


> Thanks, Bill. This is a fun write-up.
>
>> The most popular technique for generating true random data is to do what
> TrueRandom does, and drive a voltage onto pin 0, and measure it with the
> 8-bit ADC.  While sometimes this generates unpredictable data, the scatter
> plots show scary correlations, and the one thing we know it is not
> measuring is thermal noise.
>
> Is there any way you could mitigate this by diversifying board pins, for
> example read from pin 0 and 5 and XOR the data together?

As users, you should vote with your wallets and not buy products with CPUs
that don't come with a proper entropy source built in.



More information about the cryptography mailing list