RFC 1750:Randomness Recommendations for Security
RFC-Ref

hardware


Click on the red underlined text to get to the source

... build a key or password generation procedure that runs on a wide range of hardware, the only safe strategy so far has been to force the local installation to supply a suitable routine to generate random numbers ...
... quantities that will be resistant to such attack. It recommends that future systems include hardware random number generation or provide access to existing hardware ...
... hardware random number generation or provide access to existing hardware that can be used for this purpose. It suggests methods for use if such hardware ...
... hardware that can be used for this purpose. It suggests methods for use if such hardware is not available. And it gives some estimates of the number of random bits required for sample ...


... Computer clocks, or similar operating system or hardware values, provide significantly fewer real bits of unpredictability than might ...
... version of an operating system running on one set of hardware may actually provide, say, microsecond resolution in a clock while a different configuration of the "same" system may always provide the ...
... Use of a hardware serial number such as an Ethernet address ...
... likely that most of the Ethernet cards installed on Digital Equipment Corporation (DEC) hardware within DEC were manufactured by DEC itself, which significantly limits the range of built in addresses ...


... Hardware for Randomness ...
... oscillator would do the trick directly [GIFFORD]. This is a trivial amount of hardware, and could easily be included as a standard part of a computer system's architecture. Furthermore, any system with a ...
... DAVIS]. All that's needed is the common perception among computer vendors that this small additional hardware and the software to access it is necessary and useful. ...
... These numbers are trivial to achieve. It could be done by a person repeatedly tossing a coin. Almost any hardware process is likely to be much faster. ...
... serves the purpose is to take the parity of the string. This has the advantages that it is robust across all degrees of skew up to the estimated maximum skew and is absolutely trivial to implement in hardware. ...
... Existing Hardware Can Be Used For Randomness ...
... As described below, many computers come with hardware that can, with care, be used to generate truly random quantities. ...
... microphone jack. Such data is essentially random noise although it should not be trusted without some checking in case of hardware failure. It will, in any case, need to be de-skewed as described elsewhere. ...
... this method of random number generation due to hardware failure are very unlikely. ...


... Recommended Non-Hardware Strategy ...
... requirement for unguessable random numbers in the absence of a reliable hardware source? It is to obtain random input from a large number of ...
... Such a function will preserve the randomness present in any of the sources even if other quantities being combined are fixed or easily guessable. This may be advisable even with a good hardware source as hardware can also fail, though this should be weighed against any ...
... guessable. This may be advisable even with a good hardware source as hardware can also fail, though this should be weighed against any increase in the chance of overall failure due to added software complexity. ...
... DES has the advantages that it has been widely tested for flaws, is widely documented, and is widely implemented with hardware and software implementations available all over the world including source code available by anonymous FTP. The SHS ...
... regulations imposed by the US Government prohibiting the unlicensed export or import of encryption/decryption software and hardware. The same should be true of DES rigged to produce an irreversible hash ...
... Non-Hardware Sources of Randomness ...
... The best source of input for mixing would be a hardware randomness such as disk drive timing affected by air turbulence, audio input ...
... available there are other possibilities. These include system clocks, system or input/output buffers, user/system/hardware/network serial numbers ...
... attack on small single user systems, especially if the adversary has ever been able to observe the generation process in the past. A hardware based random source is still preferable. ...


... Since we have not even considered the possibilities of special purpose code breaking hardware or just how much of a safety margin we want beyond our assumptions above, probably a good minimum for a very high security cryptographic key is 128 bits ...
... recommended by the US DoD for password generation and could require user typing timing, hardware random number generation, or other sources. ...


... We have shown that hardware techniques to produce such randomness would be relatively simple. In particular, the volume and quality would not need to be high and existing computer hardware ...
... hardware techniques to produce such randomness would be relatively simple. In particular, the volume and quality would not need to be high and existing computer hardware, such as disk drives, can be used. Computational techniques are available to process low quality random quantities from multiple sources or a ...
... larger quantity of such low quality input from one source and produce a smaller quantity of higher quality, less predictable key material. In the absence of hardware sources of randomness, a variety of user and software sources can frequently be used instead with care; however, most modern systems already have hardware ...
... hardware sources of randomness, a variety of user and software sources can frequently be used instead with care; however, most modern systems already have hardware, such as disk drives or audio input, that could be used to produce high quality ...



Google
Web
RFC-Ref