A model and architecture for pseudo-random generation with applications to /dev/random

We present a formal model and a simple architecture for robust pseudorandom generation that ensures resilience in the face of an observer with partial knowledge/control of the generator’s entropy source. Our model and architecture have the following properties: • Resilience. The generator’s output looks random to an observer with no knowledge of the internal state. This holds even if that observer has complete control over data that is used to refresh the internal state. • Forward security. Past output of the generator looks random to an observer, even if the observer learns the internal state at a later time. • Backward security/Break-in recovery. Future output of the generator looks random, even to an observer with knowledge of the current state, provided that the generator is refreshed with data of sufficient entropy. Architectures such as above were suggested before. This work differs from previous attempts in that we present a formal model for robust pseudo-random gene...

• Type: Conference
• Year: 2005
• Where: CCS
• Authors: Boaz Barak, Shai Halevi
• Keywords: CCS 2005, Formal Model, Internal State, Pseudorandom Generation, Security Privacy