1S0/IEC
20543:2019(E)
Contents
Page
Foreword
••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
•
IV
Introduction
................................
.
.........................
.
..............................
.
..
.
.............................................
..
..
.
..............
..
........................
....
.......................................
v
1
2
3
4
5
6
7
8
9
10
Scope
................................................................................................................................................................................................................................
.
1
N·
ormative
references
......
............
...
................
....
.
............................
......
.....................
...
..........
..
......................
~··················································
1
Te
rm
s
and
definitions
....
..
...
........
.
.....................
.
.,
.....................................................................
.
..............................
.
..
.
...............
.....................
..
.
1
Symbols
and
abbreviated
terms
............
..
...
..
.
......
.....................
...
....................
..
............
..........
..........
.........
.......................
....
.
....
..
.......
. 7
Structure
of
this
document
............................
.
........
.
.............................
...
....
.............
.......
.........
.
...........................
.
....................................
.
..............
. 7
Overview
of
non-deterministic
random
bit
generators
....................................................................................................
7
6.1
Introductory
remarks
on
random
bit
generation
•••••••••••••
•••••••••••
••••••••••••••••••••
••••••••
•• •••••••••••••••
••
••••••
••••
•••••••••
••
••••••
•••
7
6.2
Modelling
of
rando
m sources
.......................................................................................................................................................
. 8
6.2.1 Stochastic models
..
........
.......
.
.................
..
........
.
......
.
.....
..
..............
....
......
.
........
.
.................................
......
..............
...
......
8
6.2.2 Heuristic analysis
of
entr
..
opy sources
................................
.
............
..............
.................
.........
.
.....
............
..
10
6.2.3 Physical
and
non-physical sources
.........................................................................
.
..
......
...
....................
.
.....
.. .
11
6.2.4 Overview
of
the
evaluation
of
the
random
source
of
a
TNRBG
••••••••••••••••••••••••••••••••••••••••••••
11
6.2.5 Overview
of
the
evaluation
of
the
random
source
of
an
NNRBG
....
...
.....
......
...
..........
...
...
....
12
6.3
General design
template
and
taxonomy for non-deterministic
random
bit
generators
t t • I • I I
12
6.3.1 0 v e rv i e w . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
..
. . . . . . . . .
12
6.3.2 Functional model
of
a
NRBG
....
.................
....
...
..............
.............
.
.......
..
.
.....................................
.
....................................
12
6.3.3 Components
of
a
NRBG
•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
15
Conformance
testing
of
NRBG
..............................................................................................................................................................
18
7.1
7.2
7.3
Overview
··········
···
··
···
··
·
··················
·
····
·
···
··
············
·
··········
····
·
·······
···
····
···
·······
····
·
····
·
···
·······•·••·······
······
·
··········
·
·············
···
··
··
·
························
18
Testing
7.2.1
7.2.2
7.2.3
7.2.4
········
·····
···
······
·········
··
····
·
·······
····················
·
··
···
·
····
···········
·
··
···
·
··
·
······
··
············
···
··
·····•··
••······································································
19
Design documentation
...........................................................................................................................................
..
19
Analysing
entropy
...
.....
.
.........................
.........
.............
...
..
.
......
..
.......
....
.
............
..
.
..............
..........
..
...............
.............
.
19
M in
entropy
.......................................................................................................................................................................
2 3
Statisti_cal tests ..
......................................
.
.........................
.
.......................
.
..
..
..................
..
.................
.
...................
.
.........
24
Evaluation
......................
,
..................................
,.
....
.
...........
...
.................
..
....
.
................
.
......
..............
.........
......
...
.......
.-
.......................................
25
7.3.1
General
..............................................................................
.
.............................
..
.....
..
...
.
....
...............
.....
..
..
.........
...............
.
.......
.
..
25
7.3.2 Vendor
input
to conformance testing .
...............
.
.......
.
...........
..
..........
...........
.......
..
............
....
........
...
..........
25
Overview
of
deterministic
random
bit
generators
........................................................................................................
27
8.1 General
remarks
•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
27
8.2 Structural overview
of
a deterministic
random
bit
generator
..
···········
····
·····································
..............
.
28
Conformance
testing
of
DRBG
.....
.
..........
...
.
...
..........
..................
...
...
.................
.......
.......
....
........
..........................
................................
29
9.1
9.2
Overview
..
.
.......
.....
......
.
.....
.
.......
.
.........
.
......................
..
.........
...........
..
........
......
..
..
.
.........
.
..
.
........
...
.....
...............
....
.
.........
..
............
.
..............
.
....
...
2 9
Testing
9.2.1
9.2.2
••••••••••••••••
•••••••••••
••••••••••
•
••••••••••••••
•
•••••
••••••••••
•••
•
•••••
••••••••••
••••
•••
•••••••••••••
••••••••••
••••
•••
••
•••••
•
••••••••
•••••••••••
••••••••••••••
••
••••••
•••••••
•••••••••••••••••
••••
29
Design documentation
............................................................................................................................................
. 29
Analysis
of
seed
entropy
•••••••••••
•••••
••••••••••••••
•••••••••••••••
•••••••
•••••••
••••••••••••••
•• •••••••••
••••••••
••
••••
••••••••
••
•••••••••
•••••
••••••••••
••••
29
Testing
methodology
.....................................................................................................................................................................................
30
1 0
.1
G en
era
l
...............
............
...................
......
...........
.
..............................................................
,
..........
............
.
..
.......
.
......
....
..
......
....
.
....
.
..........
...
. 3 0
10.2 Vendor
requirements
·······························································•
·
••··························•
·••··
····
···········
·
······
····
··
········
···
····
···
······
····
····•·
••
····
·
30
10.3 Tests
requirements
......................
....
......................
..
...
.......
..
........
.
................
..................
...
..
...........
....
................
........
..
.
...................
30
Annex A (normative) General
statistical
methodology
....................
.
.........................................................................
...
.................
31
Annex
B (informative)
Test
files
.............................................................................................................................................................................
38
Bib Ii o
graph
y
............
....
........
.
.................
..
...
...................
..
..
......
..
...
........................
...
...........
..
....................
.
...........................
..
......................
.
..........
..
...
...........
. 3 9
© 1S0/IEC 2019
All
ri
ghts r
ese
rv
ed
• • •
111