Abstract
In this paper, we evaluate clock signals generated in ring oscillators and self-timed rings and the way their jitter can be transformed into random numbers. We show that counting the periods of the jittery clock signal produces random numbers of significantly better quality than the methods in which the jittery signal is simply sampled (the case in almost all current methods). Moreover, we use the counter values to characterize and continuously monitor the source of randomness. However, instead of using the widely used statistical variance, we propose to use Allan variance to do so. There are two main advantages: Allan variance is insensitive to low frequency noises such as flicker noise that are known to be autocorrelated and significantly less circuitry is required for its computation than that used to compute commonly used variance. We also show that it is essential to use a differential principle of randomness extraction from the jitter based on the use of two identical oscillators to avoid autocorrelations originating from external and internal global jitter sources and that this fact is valid for both kinds of rings. Last but not least, we propose a method of statistical testing based on high order Markov model to show the reduced dependencies when the proposed randomness extraction is applied.
Highlights
In modern cryptographic systems, security is based on the statistical quality and on the unpredictability of confidential keys
We recall some basics on Markov chains in order to introduce the theorem used to compute the min-entropy rate, which is more conservative than the Shannon entropy rate
We evaluated the jitter of clock signals generated in ring oscillators and self timed rings and the way the jitter is transformed into random numbers
Summary
Security is based on the statistical quality and on the unpredictability of confidential keys. These keys are generated in random number generators (RNGs) using random physical phenomena that occur in the hardware devices in which the system is implemented. The statistical quality and unpredictability of the generated numbers depend on the size and quality (e.g. the spectrum) of the clock jitter. As required in the document AIS-20/31 published by the German Federal Office for Information Security (German acronym BSI) [KS11], the measured jitter parameters should be used as input parameters in the stochastic model used to estimate entropy, which characterizes the unpredictability of generated numbers
Published Version (Free)
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have