TRNGs are typically deployed in semiconductors for securing data communications, electronic transactions, and data storage. They are used for generation of keys, initialization vectors, cookies, and nonces. Additionally, TRNGs can also be used for statistical sampling, communications protocol timers, as well as noise generation.
In providing a hardware-based, nondeterministic noise source, the TRNG-IP-76 uses a state-of-the-art reliable shot noise oscillator implementation. This allows stable operation across very wide process, voltage, and temperature (PVT) ranges, as required for modern process node (45nm and below) semiconductors.
The shot noise oscillators create an unpredictable jittering output when asynchronously sampled by the system clock provided to the TRNGs. The outputs from the shot noise generators feed a complex, non-linear combinatorial circuit that produces the final TRNG output. This function is referred to as a hardware-implemented Non-deterministic Random Bit Generator (NRBG).
The TRNG-IP-76 is a security aware design:
The TRNG-IP-76 compliant with Federal Information Processing Standards (FIPS) Publication 140-2, facilitating system certification. The design is compliant with the latest versions for NIST SP80-900a/b/c, NIST SP80-900 Deterministic Random Bit Generator (DRBG) are available for the required post processing. The TRNG-IP-76 is FIPS-approved when integrated into the VaultIP Root of Trust.
The TRNG-IP-76 is silicon proven, and its flexible, layered design makes it easy to integrate into SoCs. A driver development kit is included.
Side-channel attacks conducted against electronic gear are relatively simple and inexpensive to execute. Such attacks include simple power analysis (SPA) and Differential Power Analysis (DPA). As all physical electronic systems routinely leak information, effective side-channel countermeasures should be implemented at the design stage to ensure protection of sensitive keys and data.
Standard configurations of the TRNG-IP-76 include:
All configurations operate with four or eight Free Running Oscillators (FROs).
In addition to this base functionality, the TRNG-IP-76 offers several configurable options that are described in the NIST specification SP800-90: