{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T10:47:19Z","timestamp":1781606839072,"version":"3.54.5"},"reference-count":27,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2024,2,29]],"date-time":"2024-02-29T00:00:00Z","timestamp":1709164800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,2,29]],"date-time":"2024-02-29T00:00:00Z","timestamp":1709164800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100007655","name":"Czech Technical University in Prague","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100007655","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cryptol"],"published-print":{"date-parts":[[2024,4]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>In this paper, we provide a complete set of algorithms aimed at the design and security evaluation of oscillator-based True Random Number Generators (TRNG). While depending on some TRNG design assumptions, the proposed algorithms use as inputs the statistical parameters of the underlying random physical process such as the clock jitter originating from the thermal noise and give a lower bound of the entropy rate of the generated bit stream as output. We describe the general structure of a TRNG composed of multiple free-running oscillators and samplers, the outputs of which are post-processed by an entropy conditioner. Depending on the specification of the entropy conditioner, which can usually be any Boolean function, we describe several algorithmic optimizations. We then explain how to compute and efficiently manage the entropy rate at the output of such a post-processing block and at the output of the generator as a whole.<\/jats:p>","DOI":"10.1007\/s00145-024-09494-6","type":"journal-article","created":{"date-parts":[[2024,2,29]],"date-time":"2024-02-29T21:24:28Z","timestamp":1709241868000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Entropy Computation for Oscillator-based Physical Random Number Generators"],"prefix":"10.1007","volume":"37","author":[{"given":"David","family":"Lubicz","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Viktor","family":"Fischer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,2,29]]},"reference":[{"issue":"3","key":"9494_CR1","doi-asserted-by":"publisher","first-page":"214","DOI":"10.46586\/tches.v2018.i3.214-242","volume":"2018","author":"EN Allini","year":"2018","unstructured":"E.\u00a0N. Allini, M.\u00a0Skorski, O.\u00a0Petura, F.\u00a0Bernard, M.\u00a0Laban, and V.\u00a0Fischer. Evaluation and monitoring of free running oscillators serving as source of randomness.  Transactions on Cryptographic Hardware and Embedded Systems (TCHES), 2018(3):214\u2013242, 2018.","journal-title":"Transactions on Cryptographic Hardware and Embedded Systems (TCHES)"},{"key":"9494_CR2","unstructured":"R.\u00a0B. Ash.  Information Theory. Dover Publications, Inc., New York, 1990. Corrected reprint of the 1965 original."},{"key":"9494_CR3","doi-asserted-by":"crossref","unstructured":"B.\u00a0Barak and S.\u00a0Halevi. An architecture for robust pseudo-random generation with applications to \/dev\/random. In  Proc. of the 12th ACM Conference on Computer and Communication Security (CCS\u201905), pages 203\u2013212, 2005.","DOI":"10.1145\/1102120.1102148"},{"key":"9494_CR4","doi-asserted-by":"publisher","first-page":"398","DOI":"10.1007\/s00145-010-9089-3","volume":"24","author":"M Baudet","year":"2011","unstructured":"M.\u00a0Baudet, D.\u00a0Lubicz, J.\u00a0Micolod, and A.\u00a0Tassiaux. On the Security of Oscillator-based Random Number Generators.  Journal of Cryptology, 24:398\u2013425, 2011.","journal-title":"Journal of Cryptology"},{"key":"9494_CR5","doi-asserted-by":"crossref","unstructured":"P.\u00a0Bayon, L.\u00a0Bossuet, A.\u00a0Aubert, and V.\u00a0Fischer. Electromagnetic analysis on ring oscillator-based true random number generators. In  2013 IEEE International Symposium on Circuits and Systems (ISCAS), pages 1954\u20131957, 2013.","DOI":"10.1109\/ISCAS.2013.6572251"},{"issue":"1","key":"9494_CR6","doi-asserted-by":"publisher","first-page":"1","DOI":"10.2478\/v10127-010-0001-1","volume":"45","author":"F Bernard","year":"2010","unstructured":"F.\u00a0Bernard, V.\u00a0Fischer, and B.\u00a0Valtchanov. Mathematical Model of Physical RNGs Based on Coherent Sampling.  Tatra Mountains Mathematical Publications, 45(1):1\u201314, 2010.","journal-title":"Tatra Mountains Mathematical Publications"},{"key":"9494_CR7","doi-asserted-by":"crossref","unstructured":"A.\u00a0Cherkaoui, V.\u00a0Fischer, L.\u00a0Fesquet, and A.\u00a0Aubert. A Very High Speed True Random Number Generator with Entropy Assessment. In G.\u00a0Bertoni and J.\u00a0S. Coron, editors,  Cryptographic Hardware and Embedded Systems \u2013 CHES 2013, volume 8086 of  LNCS, pages 179\u2013196. Springer, 2013.","DOI":"10.1007\/978-3-642-40349-1_11"},{"key":"9494_CR8","doi-asserted-by":"crossref","unstructured":"M.\u00a0Dichtl. Bad and Good Ways of Post-processing Biased Physical Random Numbers. In  Fast Software Encryption - FSE 2007, volume 4593 of  LNCS, pages 137\u2013152. Springer Verlag, 2007.","DOI":"10.1007\/978-3-540-74619-5_9"},{"issue":"11","key":"9494_CR9","doi-asserted-by":"publisher","first-page":"1142","DOI":"10.1109\/TC.1976.1674569","volume":"100","author":"B Fino","year":"1976","unstructured":"B.\u00a0Fino and V.\u00a0Algazi. Unified Matrix Treatment of the Fast Walsh-Hadamard Transform.  IEEE Transactions on Computers, 100(11):1142\u20131146, 1976.","journal-title":"IEEE Transactions on Computers"},{"issue":"1","key":"9494_CR10","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1515\/itit-2018-0025","volume":"61","author":"V Fischer","year":"2019","unstructured":"V.\u00a0Fischer, F.\u00a0Bernard, and N.\u00a0Bochard. Modern random number generator design \u2013 Case study on a secured PLL-based TRNG.  It - Information Technology, 61(1):3\u201313, 2019.","journal-title":"It - Information Technology"},{"key":"9494_CR11","doi-asserted-by":"crossref","unstructured":"V.\u00a0Fischer and D.\u00a0Lubicz. Embedded Evaluation of Randomness in Oscillator Based Elementary TRNG. In L.\u00a0Batina and M.\u00a0Robshaw, editors,  Cryptographic Hardware and Embedded Systems \u2013 CHES 2014, volume 8731 of  LNCS, pages 527\u2013543. Springer, 2014.","DOI":"10.1007\/978-3-662-44709-3_29"},{"key":"9494_CR12","doi-asserted-by":"crossref","unstructured":"T.\u00a0Guneysu. True Random Number Generation in Block Memories of Reconfigurable Devices. In  International Conference on Field-Programmable Technology \u2013 FPT 2010, pages 200\u2013207. IEEE Press, 2011.","DOI":"10.1109\/FPT.2010.5681499"},{"key":"9494_CR13","doi-asserted-by":"crossref","unstructured":"P.\u00a0Haddad, F.\u00a0Bernard, V.\u00a0Fischer, and Y.\u00a0Teglia. On the Assumption of Mutual Independence of Jitter Realizations in P-TRNG Stochastic Models. In  Design, Automation and Test in Europe \u2013 DATE 2014, Dresden, Germany. IEEE, 2014.","DOI":"10.7873\/DATE2014.052"},{"key":"9494_CR14","doi-asserted-by":"crossref","unstructured":"W.\u00a0Killmann and W.\u00a0Schindler. A Design for a Physical RNG with Robust Entropy Estimators. In E.\u00a0Oswald and P.\u00a0Rohatgi, editors,  Cryptographic Hardware and Embedded Systems \u2013 CHES 2008, volume 5154 of  LNCS, pages 146\u2013163. Springer, 2008.","DOI":"10.1007\/978-3-540-85053-3_10"},{"key":"9494_CR15","unstructured":"W.\u00a0Killmann and W.\u00a0Schindler. A proposal for: Functionality classes for random number generators, version 2.0. [online] Available at: https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/DE\/BSI\/Zertifizierung\/Interpretationen\/AIS_31_Functionality_classes_for_random_number_generators_e.pdf, 2011. Accessed: 2023-10-31."},{"key":"9494_CR16","unstructured":"M.\u00a0Laban, M.\u00a0Drutarovsky, V.\u00a0Fischer, and M.\u00a0Varchola. Platform for testing and evaluation of PUF and TRNG implementations in FPGAs. In  TRUDEVICE \u2013 6th Conference on Trustworthy Manufacturing and Utilization of Secure Devices (TRUDEVICE 2016), Barcelona, Spain, November 2016."},{"key":"9494_CR17","unstructured":"D.\u00a0Lubicz. TRNG Test Suite. [online] Available at: https:\/\/github.com\/dlubicz\/MOTRNG, 2022. Accessed: 2022-01-23."},{"key":"9494_CR18","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"317","DOI":"10.1007\/978-3-642-04138-9_23","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2009","author":"AT Markettos","year":"2009","unstructured":"A.\u00a0T. Markettos and S.\u00a0W. Moore. The Frequency Injection Attack on Ring-Oscillator-Based True Random Number Generators. In Christophe Clavier and Kris Gaj, editors,  Cryptographic Hardware and Embedded Systems \u2013 CHES 2009, volume 5747 of  LNCS, pages 317\u2013331. Springer Berlin Heidelberg, 2009."},{"issue":"7","key":"9494_CR19","doi-asserted-by":"publisher","first-page":"2560","DOI":"10.1109\/TCSI.2019.2900017","volume":"66","author":"U Mureddu","year":"2019","unstructured":"U.\u00a0Mureddu, N.\u00a0Bochard, L.\u00a0Bossuet, and V.\u00a0Fischer. Experimental study of locking phenomena on oscillating rings implemented in logic devices.  IEEE Transactions on Circuits and Systems I: Regular Papers, 66(7):2560\u20132571, 2019.","journal-title":"IEEE Transactions on Circuits and Systems I: Regular Papers"},{"key":"9494_CR20","unstructured":"M.\u00a0Peter and W.\u00a0Schindler. A proposal for Functionality classes for random number generators, version 2.35 - DRAFT. [online] Available at: https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/EN\/BSI\/Certification\/Interpretations\/AIS_31_Functionality_classes_for_random_number_generators_e.pdf, 2022. Accessed: 2023-10-31."},{"key":"9494_CR21","doi-asserted-by":"crossref","unstructured":"W.\u00a0Schindler and W.\u00a0Killmann. Evaluation Criteria for True (Physical) Random Number Generators Used in Cryptographic Applications. In B.\u00a0S. Kaliski, C.\u00a0Ko\u00e7, and C.\u00a0Paar, editors,  Cryptographic Hardware and Embedded Systems \u2013 CHES 2002, volume 2523 of  LNCS, pages 431\u2013449. Springer, 2003.","DOI":"10.1007\/3-540-36400-5_31"},{"issue":"379\u2013423","key":"9494_CR22","doi-asserted-by":"publisher","first-page":"623","DOI":"10.1002\/j.1538-7305.1948.tb00917.x","volume":"27","author":"CE Shannon","year":"1948","unstructured":"C.\u00a0E. Shannon. A Mathematical Theory of Communication.  Bell System Tech. J., 27:379\u2013423, 623\u2013656, 1948.","journal-title":"Bell System Tech. J."},{"issue":"1","key":"9494_CR23","doi-asserted-by":"publisher","first-page":"109","DOI":"10.1109\/TC.2007.250627","volume":"56","author":"B Sunar","year":"2007","unstructured":"B.\u00a0Sunar, W.\u00a0J. Martin, and D.\u00a0R. Stinson. A Provably Secure True Random Number Generator with Built-In Tolerance to Active Attacks.  IEEE Transactions on Computers, 56(1):109\u2013119, 2007.","journal-title":"IEEE Transactions on Computers"},{"key":"9494_CR24","unstructured":"G.\u00a0Taylor and G.\u00a0Cox. Behind Intel\u2019s New Random-Number Generator. [online] Available at: https:\/\/spectrum.ieee.org\/computing\/hardware\/behind-intels-new-randomnumber-generator, 2011. Accessed: 2023-10-31."},{"key":"9494_CR25","doi-asserted-by":"crossref","unstructured":"M.\u00a0Varchola and M.\u00a0Drutarovsky. New High Entropy Element for FPGA Based True Random Number Generators. In S.\u00a0Mangard and F.X. Standaert, editors,  Cryptographic Hardware and Embedded Systems \u2013 CHES 2010, volume 6225 of  LNCS, pages 351\u2013365. Springer, 2010.","DOI":"10.1007\/978-3-642-15031-9_24"},{"key":"9494_CR26","doi-asserted-by":"crossref","unstructured":"I.\u00a0Vasyltsov, E.\u00a0Hambardzumyan, Y.-S. Kim, and B.\u00a0Karpinskyy. Fast Digital TRNG Based on Metastable Ring Oscillator. In E.\u00a0Oswald and P.\u00a0Rohatgi, editors,  Cryptographic Hardware and Embedded Systems \u2013 CHES 2008, volume 5154 of  LNCS, pages 164\u2013180. Springer, 2008.","DOI":"10.1007\/978-3-540-85053-3_11"},{"key":"9494_CR27","doi-asserted-by":"crossref","unstructured":"X.\u00a0Wu, Y.\u00a0Ma, J.\u00a0Yang, T.\u00a0Chen, and J.\u00a0Lin. On the Security of TRNGs Based on Multiple Ring Oscillators. In S.\u00a0Chen, K.\u00a0Choo, X.\u00a0Fu, W.\u00a0Lou, and A.\u00a0Mohaisen, editors,  Security and Privacy in Communication Networks - SecureComm 2019, volume 305 of  Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering. Springer, 2019.","DOI":"10.1007\/978-3-030-37231-6_5"}],"container-title":["Journal of Cryptology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-024-09494-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00145-024-09494-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-024-09494-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,25]],"date-time":"2024-04-25T21:02:12Z","timestamp":1714078932000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00145-024-09494-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,29]]},"references-count":27,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2024,4]]}},"alternative-id":["9494"],"URL":"https:\/\/doi.org\/10.1007\/s00145-024-09494-6","relation":{},"ISSN":["0933-2790","1432-1378"],"issn-type":[{"value":"0933-2790","type":"print"},{"value":"1432-1378","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,29]]},"assertion":[{"value":"26 January 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 January 2024","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 January 2024","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 February 2024","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"13"}}