CN101364171B - Dynamic real random number generator - Google Patents

Dynamic real random number generator Download PDF

Info

Publication number
CN101364171B
CN101364171B CN200810048311XA CN200810048311A CN101364171B CN 101364171 B CN101364171 B CN 101364171B CN 200810048311X A CN200810048311X A CN 200810048311XA CN 200810048311 A CN200810048311 A CN 200810048311A CN 101364171 B CN101364171 B CN 101364171B
Authority
CN
China
Prior art keywords
chaos
output
block cipher
random number
dynamic
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN200810048311XA
Other languages
Chinese (zh)
Other versions
CN101364171A (en
Inventor
张焕国
唐明
李幼名
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Wuhan University WHU
Original Assignee
Wuhan University WHU
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Wuhan University WHU filed Critical Wuhan University WHU
Priority to CN200810048311XA priority Critical patent/CN101364171B/en
Publication of CN101364171A publication Critical patent/CN101364171A/en
Application granted granted Critical
Publication of CN101364171B publication Critical patent/CN101364171B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention relates to a dynamic true random number generator, which is composed of a true random source Von Neumann checker, a packet hybrid network and a dynamic control component. The data generated by the true random source is input into the Von Neumann checker, and the output terminal of the Von Neumann checker is connected with the input terminal of the packet hybrid network; the packet hybrid network comprises a chaos transformation component, a discretization component and a block cipher component, the output terminal of the chaos transformation component is adjusted through the block cipher component after passing through the discretization component, the dynamic control component controls the structure of the chaos transformation component through signals and/or the parameter of the nonlinear component in the block cipher component to ensure the sequence outputting of the packet hybrid network to evolve in the direction according with the test standard along the working process, and the final output obtained from the packet hybrid network according with the test standard is a true random number sequence. The true random number generator can generate high-quality and high-stability true random number sequence, can resist various attacks by the dynamic structure, and has high security.

Description

Dynamic real random number generator
Technical field
The invention belongs to the information security application, particularly a kind of dynamic real random number generator.
Background technology
Randomizer is divided into pseudorandom number generator and real random number generator.The sequence of its generation of real random number generator has unpredictability.The cycle of pseudorandom number generator is limited, but cycle its performance of sufficiently long pseudorandom number generator approaches real random number generator.General true random source can only guarantee the unpredictability of sequence, and can not guarantee the statistics random character of sequence, usually adopt the method for obscuring and spreading that the sequence that produces is carried out hydridization, make that the sequence after the hydridization can be by Diehard test or NIST test.
According to the cryptography principle, the safety of password depends on the safety of key, will use random number and produce key.So the randomizer that is used to produce key has just become to guarantee the key of cryptosecurity.All used random number in existing many safety authentication protocols, and the randomness of random number has directly determined the security of agreement.If random number successfully predicted, then the security of authentication protocol was just lost efficacy, this will to as ecommerce etc. produce huge blow with the application that information security is closely related, therefore, randomizer has just become the core of assurance safety authentication protocol validity.
Present more existing randomizers, but all can not test by NIST by high probability; The randomness instability of randomizer; Detection method is provided by the protos test suite PROTOS that adopts NIST official to provide at random, can't know and embody performance at random.Simultaneously, certainly will there be fixing situation of cycle in existing randomizer often sample fixing method for designing and project organization, this fixed sturcture, and that the fixed cycle is a random series is unallowable in particular for information security field randomizer institute.
Summary of the invention
The object of the invention is at the deficiencies in the prior art, proposes a kind of general high-quality dynamic real random number generator.
Technical scheme of the present invention is: dynamic real random number generator is made up of true random source, von Neumann checker, grouping hybridization network and dynamic control section part, the data input von Neumann checker that true random source produces, the input of grouping hybridization network is received in the output of von Neumann checker; Described grouping hybridization network includes chaos transform component, discretize parts and block cipher parts, the output of chaos transform component is adjusted by the block cipher parts behind the discretize parts, the dynamic control section part by signal controlling chaos transform component structure and/or the block cipher parts in the parameter of non-linear components make the sequence output of grouping hybridization network develop with the course of work to the direction that meets testing standard, the final output that grouping hybridization network gained meets testing standard is true random sequence.
And described true random source adopts the PLL oscillatory circuit to realize.
And, adopt the Lyapunov index as testing standard at the structure of chaos transform component, adopt NIST SP800-22 as testing standard at the sequence output that the grouping hybridization network produces.
And the concrete mode of the structure of dynamic control section part control chaos transform component is, the Lyapunov index of judging chaos output when the dynamic control section part adopts the structure of corresponding chaos controlling factor structure chaos transform component greater than 0 the time.
And described block cipher parts adopt strong block cipher that the output of chaos transform component is adjusted, and the plaintext of every group of password part and key do not wait, and the key of respectively organizing password part does not repeat.
And the implementation that the parameter of the non-linear components of described block cipher develops is, allows the S box dynamic change of block cipher.
And the implementation of the S box dynamic change of described block cipher is that affined transformation is done in the input of S box.
Perhaps, the implementation of the S box dynamic change of described block cipher is to adopt the adaptive value construction of function S box of corresponding random statistical characteristic.
Perhaps, the implementation of the S box dynamic change of described block cipher is that the shifting equivalence characteristic of employing orthomorphic permutation generates S box of equal value.
The present invention has following technique effect:
1. guarantee that with the physics true random source random series that produces is uncertain, promptly realized real random number generator.
2. this real random number generator has dynamic evolution structure, can guarantee to produce high-quality random series, can resist various attacks at randomizer with dynamic structure again, has very high security.
3. can produce high-quality random series, have quite high stability, can be by multiple internationally recognized random testing methods such as NIST.
4. dynamic control process is succinct, and random number produces the efficient height, is example with software test on the P4 platform, and speed can reach 1-2Mbps.
5. the corresponding dynamic random series produces implementation procedure and supports multi-platform design, both can be used for software design to produce pseudorandom number generator, also can realize real random number generator by hardware, portable strong between platform.
Description of drawings
Fig. 1 is the principle schematic of the embodiment of the invention;
Fig. 2 is an embodiment of the invention integrated circuit board structural representation.
Fig. 3 is the true random source and the initial treatment circuit diagram of the embodiment of the invention;
Fig. 4 is a chaos conversion principle schematic;
Embodiment
Describe technical scheme of the present invention in detail below in conjunction with accompanying drawing: form by true random source, von Neumann checker (being called for short VN), grouping hybridization network and dynamic control section part, the data input von Neumann checker that true random source produces, the input of grouping hybridization network is received in the output of von Neumann checker; Described grouping hybridization network includes chaos transform component, discretize parts and block cipher parts, the output of chaos transform component is adjusted by the block cipher parts behind the discretize parts, the dynamic control section part by signal controlling chaos transform component structure and/or the block cipher parts in the sequence output that makes the grouping hybridization network with the course of work of the parameter of non-linear components develop to the direction that meets testing standard (for example the U.S. propose NIST SP800-22 standard), the final output that grouping hybridization network gained meets testing standard is true random sequence.The sequence output of described order grouping hybridization network is developed to the direction that meets testing standard, can adopt the feedback iterative manner during enforcement, at first the dynamic control section part judges whether the output sequence of grouping hybridization network meets testing standard, if meet then the directly final output of conduct, if do not meet, then can will carry out chaos conversion and block cipher adjustment again after the output sequence feedback.This feedback iterative manner can economize on resources, and only needs under the guiding of dynamic control section part output sequence to be carried out iterative processing and gets final product, and implementation structure is simple.During concrete enforcement, one of parameter of non-linear components develops in structure that can be by dynamic control section part control chaos transform component and the block cipher parts, perhaps the both is developed, and can reach the effect that produces the dynamic random sequence.For example the chaos transform component has been selected for use and has been got chaos parameter preferably, makes that the Lyapunov index of chaos is bigger, and the parameter of non-linear components gets final product in the block cipher parts that so only develop.The block cipher parts generally have linear unit and non-linear components, only need the parameter of non-linear components is developed.
This dynamic real random number generator provided by the invention both can utilize equipment such as computing machine to carry out software and realize, also can realize by hardware.Referring to Fig. 2, the invention provides embodiment and carry out the integrated circuit board structure of hardware when realizing, so that specifically implement reference: at first be true random source and initial treatment, input control and data buffering, then data are sent into the grouping hybridization network, are output control and data buffering at last.The dynamic control section part is realized dynamically developing to grouping hybridization network input control signal.During concrete enforcement, also can be with grouping hybridization network and the integrated setting of dynamic control section part.
The collection of true random source can be according to the concrete structure and the resource of design platform, as fpga chip as design platform, then comparatively ideal true random source is the PLL oscillatory circuit, and the phase deviation that is about to different clock frequencies is as the physics true random source, and its physical security is to obtain theoretical proof.Can certainly gather multiple true random source, as uncertain true random source, multiple true random source can further improve the unpredictability that produces sequence as the interactive data that can gather man-machine interface as some operating system.Referring to Fig. 3, the true random source of the embodiment of the invention and the circuit structure of initial treatment are: the pll clock lock connects d type flip flop to ring, connects von Neumann checker VN then, is preferably in shift register Shift Register buffer memory.The effect of von Neumann adjustment is to allow in the sequence after the discretize 0 and 1 distribution in a basic balance, thereby improves the statistics random character of sequence.The von Neumann adjustment is output as bit 1 with [0,1] bit to adjustment, and [1,0] bit is output as bit 0 to adjustment, and other bit is to not output.
If select when implementing the structure of chaos transform component is developed, feed back so in the iteration and can carry out repeatedly chaos conversion, therefore can regard as and realize multistage chaos.Referring to accompanying drawing 4, the process of n level chaos iteration model is exactly that initial value is imported the 1st grade of chaos iteration and produced the 1st grade of output; The 1st grade of output is input to the 2nd grade of chaos iteration again and produces the 2nd grade of output ... n-1 level chaos iteration produces the output of n-1 level; Produce the output of n level up to n level chaos iteration, promptly final chaos time sequence.
The Jacobi matrix of the verified this r of existing document class connection chaotic model has r eigenwert, that is to say that r class connection chaos system is a r dimension dynamical system, its chaotic behavior is more more complicated than one dimension chaos system, is a kind of randomizer model with certain researching value.The analysis showed that by software simulation if adopt the logistic chaotic model, 5 grades of cascades can be by the available tested sequence of an initial value generation greater than 1Mb.In order to have more performance, the selection of Chaos dynamic system should be followed following principle: (1) chaos system has the bigger cycle.Use in the computer Simulation calculation in reality, because the finite precision effect of computing machine causes just being absorbed in convergence behind the certain algebraically of chaos iteration.The chaos cascade can partly address this problem.(2) chaos system should satisfy even distribution.For the logistic chaotic model, it does not satisfy evenly distribution, regards even distribution as but can be similar in interval [0.2,0.8] scope.
In order to make randomness better, the chaos controlling factor should satisfy certain scope.Logistic chaos system x for example N+1=r * x n* (1-x n) x N+1=r*x 0* (1-x 0), its r value should be a chaos to guarantee logistic in (3.5699,4) scope.Yet, nonetheless, inner also having between many very little periodic region between the chaotic region.
Therefore the invention provides further technical scheme: the structure at the chaos transform component adopts the Lyapunov index as testing standard, allow controlling elements dynamic change in preset range of chaos, the Lyapunov index of judging chaos output when the dynamic control section part adopts the structure of corresponding chaos controlling factor structure chaos transform component greater than 0 the time.The Lyapunov index of correspondence sorts the r value when selecting Lyapunov index maximum then when using the Lyapunov index to control can to obtain different r value according to the Lyapunov index.Usually, for the power system in certain span,, finally can reach extremely chaos state if the Lyapunov index greater than 0, can think that this system is a chaos, and when the Lyapunov index was big more, power system was got over chaos.During concrete enforcement, controlling elements dynamic change in suitable scope of chaos can be allowed, the structural change of chaos transform component can be realized.For example, allow the parameter r of logistic in certain scope, change, make its corresponding Lyapunov index keep reasonable statistics randomness in the time of enough big.
After handling, the chaos transform component carries out discretize and is the chaos time sequence discretize in the real number scope making things convenient for computing machine to handle to be mapped on the integer field.For the Chaos dynamic system of different distributions, should adopt different discretization methods.Logistic is adopted in the randomizer design of the embodiment of the invention, and value is [0.2,0.8] in, can be similar to and regard even distribution as, then with interval [0.2,0.8] be divided into 2 M time interval, what real number dropped on the odd number interval turns to 0 with regard to two-value, otherwise two-value turns to 1. wherein, and M is an integer, but general value is 8,16 etc.This discretization method has kept the repeatedly characteristic of mixing of original chaos effectively.
The block cipher parts of the embodiment of the invention adopt strong block cipher that the output of chaos transform component is adjusted, and the plaintext of every group of password part and key do not wait, and respectively to organize between the key of password part be unduplicated.When selecting parameter to the non-linear components of block cipher to develop, embodiment is exactly to allow the S box dynamic change of block cipher.Specific implementation has multiple, the invention provides three kinds and realize easy scheme: the one, the S box method for designing of reference AES, affined transformation is done in input to the S box, and the characteristic of S box does not change, but the new S box that the S box of affined transformation and block cipher itself constitutes is dynamic mapping.Can list of references S.Murphy, M.J.B.Robshaw. Essential Algebraic Structure Within the AES.Information Security Group, Royal Holloway, University of London, Egham, Surrey, TE200EX, U.K. two is to adopt the thought of design that develops, and constructs better S box, and key is to seek the better adaptive value function of corresponding random statistical characteristic.The 3rd, the shifting equivalence characteristic of employing orthomorphic permutation generates S box of equal value.In fact, the S box of block cipher is not an orthomorphic permutation, but the S box of the 8*8 that available orthomorphic permutation generates is replaced.

Claims (4)

1. a dynamic real random number generator is characterized in that: be made up of true random source, von Neumann checker, grouping hybridization network and dynamic control section part; The data input von Neumann checker that true random source produces, the input of grouping hybridization network is received in the output of von Neumann checker, and described von Neumann checker is with [0,1] bit is output as bit 1 to adjustment, [1,0] bit is output as bit 0 to adjustment, and other bit is to not output; Described grouping hybridization network includes chaos transform component, discretize parts and block cipher parts, described discretize parts with interval [0.2,0.8] be divided into 2 M time interval, what real number dropped on the odd number interval turns to 0 with regard to two-value, otherwise two-value turns to 1, and wherein M is an integer; The output of chaos transform component is adjusted by the block cipher parts behind the discretize parts, the dynamic control section part by signal controlling chaos transform component structure and/or the block cipher parts in the parameter of non-linear components make the sequence output of grouping hybridization network develop with the course of work to the direction that meets testing standard, the final output that grouping hybridization network gained meets testing standard is true random number sequence;
Described dynamic control section part by the concrete mode of the structure of signal controlling chaos transform component is, structure at the chaos transform component adopts the Lyapunov index as testing standard, allow controlling elements dynamic change in preset range of chaos, the Lyapunov index of judging chaos output when the dynamic control section part adopts the structure of corresponding chaos controlling factor structure chaos transform component greater than 0 the time;
The implementation that the parameter of the non-linear components of described block cipher develops is, by the input of S box being done the mode of affined transformation, or adopts the shifting equivalence characteristic of orthomorphic permutation to generate the mode of S box of equal value, allows the S box dynamic change of block cipher.
2. dynamic real random number generator according to claim 1 is characterized in that: described true random source adopts the PLL oscillatory circuit to realize.
3. dynamic real random number generator according to claim 1 is characterized in that: adopt NIST SP800-22 as testing standard at the sequence output that the grouping hybridization network produces.
4. according to claim 1 or 2 or 3 described dynamic real random number generators, it is characterized in that: described block cipher parts adopt strong block cipher that the output of chaos transform component is adjusted, the plaintext of every group of password part and key do not wait, and the key of respectively organizing password part does not repeat.
CN200810048311XA 2008-07-07 2008-07-07 Dynamic real random number generator Expired - Fee Related CN101364171B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN200810048311XA CN101364171B (en) 2008-07-07 2008-07-07 Dynamic real random number generator

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN200810048311XA CN101364171B (en) 2008-07-07 2008-07-07 Dynamic real random number generator

Publications (2)

Publication Number Publication Date
CN101364171A CN101364171A (en) 2009-02-11
CN101364171B true CN101364171B (en) 2011-05-11

Family

ID=40390550

Family Applications (1)

Application Number Title Priority Date Filing Date
CN200810048311XA Expired - Fee Related CN101364171B (en) 2008-07-07 2008-07-07 Dynamic real random number generator

Country Status (1)

Country Link
CN (1) CN101364171B (en)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102013974B (en) * 2010-11-30 2012-07-04 北京航空航天大学 Randomly varying nonlinear step-based encryption method
US8379848B2 (en) * 2011-07-07 2013-02-19 Cape Light Institute, Inc. Method of providing a portable true random number generator based on the microstructure and noise found in digital images
KR101557761B1 (en) * 2014-02-12 2015-10-06 한국전자통신연구원 Apparatus and method for stabilizing output stream of real random number generator
CN103838546B (en) * 2014-02-20 2017-02-08 大唐微电子技术有限公司 Chaos true random number generation circuit and method
CN106383691A (en) * 2016-09-18 2017-02-08 北京智芯微电子科技有限公司 Random number generation method and random number generator
CN108832963B (en) * 2018-05-31 2020-04-14 沈阳理工大学 Integrated evaluation method for control parameter of quasi-random sequence in spread spectrum communication system
CN110311777B (en) * 2019-07-03 2021-08-31 华中农业大学 Random password generation method and system based on one-class cryptography permutation
CN110532763B (en) * 2019-09-03 2022-11-18 华中农业大学 Password construction method and system based on high-order orthomorphism replacement
CN111313684A (en) * 2020-02-19 2020-06-19 广州大学 Chaotic signal generation method and circuit, modulation signal output circuit and switching power supply
CN113328848B (en) * 2021-05-21 2022-07-15 清华大学 Parameterized S box generation method, device, equipment and storage medium

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1770094A (en) * 2005-10-17 2006-05-10 浙江大学 High quality true random number generator
US7047262B2 (en) * 2002-08-21 2006-05-16 Koninklijke Philips Electronics N.V. Entropy estimation and decimation for improving the randomness of true random number generation

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7047262B2 (en) * 2002-08-21 2006-05-16 Koninklijke Philips Electronics N.V. Entropy estimation and decimation for improving the randomness of true random number generation
CN1770094A (en) * 2005-10-17 2006-05-10 浙江大学 High quality true random number generator

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
姜伟.基于混沌理论的信息加密技术的研究与设计.中国优秀硕博学位论文全文数据库(硕士)信息科技辑.中国学术期刊(光盘版)电子杂志社,2007,(第4期),全文. *

Also Published As

Publication number Publication date
CN101364171A (en) 2009-02-11

Similar Documents

Publication Publication Date Title
CN101364171B (en) Dynamic real random number generator
Merah et al. Design and FPGA implementation of Lorenz chaotic system for information security issues
CN102375722A (en) True random number generation method and generator
CN103812596B (en) The generation method and device of pseudo-random sequence
Artuğer et al. An effective method to improve nonlinearity value of substitution boxes based on random selection
CN103019648A (en) True random number generator with digital post-processing circuit
CN105005462A (en) Mixed random number generator and method for generating random number by using mixed random number generator
Kammoun et al. FPGA-based implementation of the SHA-256 hash algorithm
Ma et al. A lightweight encryption algorithm for edge networks in software-defined industrial internet of things
US8370411B2 (en) Generating unique random numbers for multiple instantiations
CN101772915A (en) Cryptographic random number generator using finite field operations
CN109117118A (en) Random number extracting method based on ring oscillator structure real random number generator
Arora et al. FPGA implementation of low power and high speed hummingbird cryptographic algorithm
CN103701591B (en) A kind of sequential cipher realization method and key stream generate method and device
CN113949504A (en) High-speed SM4 cryptographic algorithm circuit suitable for mobile device
CN110213037B (en) Stream cipher encryption method and system suitable for hardware environment
CN104461452A (en) Method and device for generating true random numbers in system on chip
Hue et al. Implementation of secure SPN chaos-based cryptosystem on FPGA
Parikibandla et al. Low area field‐programmable gate array implementation of PRESENT image encryption with key rotation and substitution
Li et al. Hardware design and implementation of Wi-Fi technology based encryption system
Adamowicz et al. Wireless short-range device for wind generators
Marinakis Sampling methods for cryptographic tests
Wang et al. FPGA implementation of real-time secure OFDM transmission using digital chaos
Aydın et al. Automated Chaos-Driven S-Box Generation and Analysis Tool for Enhanced Cryptographic Resilience
Vorobets et al. Self-reconfigurable cryptographical coprocessor for data streaming encryption in tasks of telemetry and the Internet of Things

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
C17 Cessation of patent right
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20110511

Termination date: 20110707