Accelerated implementation for testing IID assumption of NIST SP 800-90B using GPU

Analysis and Improvement of Entropy Estimators in NIST SP 800-90B for Non-IID Entropy Sources

Random number generators (RNGs) are essential for cryptographic applications. In most practical applications, the randomness of RNGs is provided by entropy sources. If the randomness is less than the expected, the security of cryptographic applications could be undermined. Accurate entropy estimation is a critical method for the evaluation of RNG security, and significant overestimation and und...

Comments Received on NIST SP 800-90B: Recommendation for the Entropy Sources Used for Random Bit Generation

NIST SP 800 - 6 Automated Tools for Testing Computer Systems Vulnerability

Computer security "incidents" occur with alarming frequency. The incidents range from direct attacks by both hackers and insiders to automated attacks such as network worms. Weak system controls are frequently cited as the cause, but many of these incidents are the result of improper use of existing control mechanisms. For example, improper access control specifications for key system files cou...

Security Analysis of DRBG Using HMAC in NIST SP 800-90

HMAC DRBG is a deterministic random bit generator using HMAC specified in NIST SP 800-90. The document claims that HMAC DRBG is a pseudorandom bit generator if HMAC is a pseudorandom function. However, no proof is given in the document. This article provides a security analysis of HMAC DRBG and confirms the claim.

More Powerful and Reliable Second-Level Statistical Randomness Tests for NIST SP 800-22

Random number generators (RNGs) are essential for cryptographic systems, and statistical tests are usually employed to assess the randomness of their outputs. As the most commonly used statistical test suite, the NIST SP 800-22 suite includes 15 test items, each of which contains two-level tests. For the test items based on the binomial distribution, we find that their second-level tests are fl...