True Random Number Generator (TRNG) IP
The True Random Number Generator is an essential silicon-proven digital IP core for all FPGA, ASIC and SoC designs that targets cryptographically secured applications.
It is a digital source of entropy designed for compliance with the NIST-800-90B and AIS31. The IP Core successfully passed NIST-800-22, 90B and AIS31 test suites on the entropy source and it is compliant with the FIPS-140-2 validation.
In the industry there are two types of random number generator:
- Deterministic Random Number Generator (DRBG) where the data is computed by an algorithm (usually a cryptographic algorithm).
- The advantage of this type of RNG is that it is compact and guarantees a good throughput.
- The disadvantage of this type of RNG is that the data is predictable.
- True Random Number Generator (TRNG)
- It does not exploit an algorithm but a physical source of entropy.
- The advantage of this type of RNG is that it is unpredictable
- The disadvantage of this kind of RNG is it’s slower than the deterministic one
The DRBG and TRNG must cooperate to ensure concrete security without neglecting performances. Secure-IC offers both True Random Number Generator (TRNG) resilient to harmonic injection for statistically independent sets of bits generation and Deterministic Random Bit Generator (DRBG) for high bitrates requirements. These random generators are compatible with commonly used statistical test suites.
- Random number generation is critical for any secure device. Random numbers are used for key generation, key exchange, digital signature, encryption and more. Typical secure protocols like IPsec, MACsec, TLS/SSL or wireless use them during authentication/ key exchange and data streaming phases.
- The true random number generator includes conditioning function and health tests as de ned in the NIST 800-90B and AIS31. Convenient AMBA APB interface is used for both control and data transfer.
TRNG is particularly relevant for:
- Defense
- IPSec (VPN)
- TLS/SSL
- Automotive industry
- IoT
- Wearable devices
- Embedded Security
Software Support
Linux drivers are available to ease the integration in Linux OS. The Linux driver provides direct access to the true random number generator through “/dev/random”. Software driver for micro-controller application is also available to ease the control of the random generator.
Technology
The entropy source is completely digital without any speci c technology-dependent implementation. It makes it easy to port it to any technology (all ASIC nodes, Intel and Xilinx FPGA families). The random generator has been used in many ASIC and FPGA designs. Products from our customers have also passed FIPS 140-2 validation.