Random number generator generating random number by using at least two algorithms, and security device comprising the random number generator

Patent metadata

Field	Value
Publication number	US-11036472-B2
Application number	US-201816182897-A
Country	US
Kind code	B2
Filing date	Nov 7, 2018
Priority date	Nov 8, 2017
Publication date	Jun 15, 2021
Grant date	Jun 15, 2021

Abstract

A random number generator generates a random number by using at least two algorithms. A security device includes the random number generator. The random number generator includes a random seed generator and a post processor. The random seed generator is configured to receive an entropy signal and to generate a random seed of a digital region generated by using the entropy signal. The post processor is configured to generate a random number from the random seed by using a first algorithm and a second algorithm. A bias property represents unbiasedness of a result value, and a bias property of the first algorithm is different from a bias property of the second algorithm.

First claim

What is claimed is:

1. A random number generator, comprising:
a random seed generator configured to receive an entropy signal and to generate a random seed of a digital region generated by using the entropy signal; and
a post processor configured to generate first data by applying the random seed to a first algorithm and to generate a random number by applying the first data to a second algorithm,
wherein a bias property represents unbiasedness of a result value, and a bias property of the first algorithm is different from a bias property of the second algorithm; and
wherein the post processor generates the first data by performing a feedback substitution operation N times on the first algorithm, based on the random seed, and generates the random number by performing the feedback substitution operation M times on the second algorithm, based on the first data, wherein M and N are natural numbers.

2. The random number generator of claim 1 , wherein the first algorithm comprises a symmetric-key encryption algorithm, and the second algorithm comprises a hash function algorithm.

3. The random number generator of claim 2 , wherein
the first algorithm comprises an advanced encryption standard (AES) algorithm, and the second algorithm comprises a secure hash algorithm (SHA) 256 , and
the post processor generates the first data by performing the feedback substitution operation sixteen times on the first algorithm sixteen times, based on the random seed, and generates the random number by performing the feedback substitution operation once on the second algorithm, based on the first data.

4. The random number generator of claim 1 , wherein the first algorithm is a hash function algorithm, and the second algorithm comprises a symmetric-key encryption algorithm.

5. The random number generator of claim 1 , wherein the post processor generates second data by applying the random seed to the second algorithm, and generates the random number by using the first data and the second data.

6. The random number generator of claim 5 , wherein
the post processor comprises a logic gate configured to generate the random number via a logic operation on the first data and the second data, and
the logic gate comprises one of an XOR gate, an OR gate, an AND gate, a NOR gate, and a NAND gate.

7. The random number generator of claim 5 , wherein
the post processor generates the second data by performing the feedback substitution operation on the second algorithm M times, based on the random seed, wherein M and N are natural numbers, and
the first algorithm comprises a symmetric-key encryption algorithm, and the second algorithm comprises a hash function algorithm.

8. The random number generator of claim 1 , further comprising:
a first random seed generator configured to receive a first entropy signal and to generate a first random seed generated by using the first entropy signal; and
a second random seed generator configured to receive a second entropy signal and generate a second random seed generated by using the second entropy signal,
wherein the post processor generates first data by applying the first random seed to the first algorithm, generates second data by applying the second random seed to the second algorithm, and generates the random number by using the first data and the second data.

9. The random number generator of claim 1 , wherein the post processor is configured to generate second data by applying the first data to the second algorithm, and to generate third data by applying the second data to a third algorithm.

10. The random number generator of claim 1 , wherein the random seed generator comprises:
a random seed collector configured to generate a random seed by sampling an entropy signal received from an entropy source; and
a random seed storage configured to store the random seed.

11. A security device, comprising:
an entropy source configured to generate an entropy signal by using randomness;
a random seed generator configured to receive the entropy signal and to generate a digital random seed generated by using the entropy signal; and
a post processor comprising a first algorithm processor, a second algorithm processor and a logic gate, wherein the post processor is configured to generate a random number from the digital random seed by using a first algorithm and a second algorithm,
wherein the first algorithm comprises a symmetric-key encryption algorithm, and the second algorithm comprises a hash function algorithm;
wherein the first algorithm processor is configured to generate first data by applying the digital random seed to the first algorithm;
the second algorithm processor is configured to generate second data by applying the digital random seed to the second algorithm; and
the logic gate is configured to generate the random number by using the first data and the second data.

12. The security device of claim 11 , wherein the
first algorithm processor is configured to generate the first data by performing a feedback substitution operation N times on the first algorithm, based on the digital random seed, wherein N is a natural number; and
the second algorithm processor is configured to generate the random number by performing the feedback substitution operation M times on the second algorithm, based on the first data, wherein M is a natural number.

13. The security device of claim 12 , wherein
the first algorithm comprises an advanced encryption standard (AES) algorithm, and the second algorithm comprises a secure hash algorithm (SHA) 256 , and
the first algorithm processor generates the first data by performing the feedback substitution operation sixteen times on the first algorithm, based on the digital random seed, and the second algorithm processor generates the random number by performing the feedback substitution operation on the second algorithm once, based on the first data.

14. A random number generating method performed by a random number generator comprising a random seed generator and a post processor, the random number generating method comprising:
receiving an entropy signal from an entropy source, wherein the receiving is performed by the random seed generator;
generating a random seed of a digital region by using the entropy signal, wherein the generating is performed by the random seed generator; and
generating a random number from the random seed by using a first algorithm and a second algorithm, wherein the generating is performed by the post processor,
wherein a bias property represents unbiasedness of a result value, and a bias property of the first algorithm is different from a bias property of the second algorithm, and
wherein the first algorithm comprises a symmetric-key encryption algorithm, and the second algorithm comprises a hash function algorithm.

15. The random number generating method of claim 14 , wherein the generating of the random number comprises:
generating, by the post processor, first data by performing a feedback substitution operation N times on the first algorithm, based on the random seed, wherein N is a natural number; and
generating, by the post processor, the random number by performing the feedback substitution operation M times on the second algorithm, based on the first data, wherein M is a natural number.

16. The random number generating method of claim 14 , wherein the generating of the random number comprises:
generating first data by applying the random seed to the first algorithm, wherein the generating is performed by the post processor;
generating second data by applying the random seed to the

Assignees

• Samsung Electronics Co Ltd

Inventors

• Kim Sung-Kyoung
• Yoon Joong-Chul
• Lee Seung-Won

Classifications

• G06F7/58 Primary

  Random or pseudo-random number generators · CPC title

• H04L9/0662

  with particular pseudorandom sequence generator · CPC title

• H04L2209/12

  Details relating to cryptographic hardware or logic circuitry · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L2209/08

  Randomization, e.g. dummy operations or using noise · CPC title