TW200418266A - Random number generator using audio card - Google Patents

Abstract

A random number generator using audio card is disclosed, wherein the audio card widely installed on the personal computer or Unix workstation is used to extract the noise value in the microphone port as the primitive value of the random number sequence, and a procedure is performed to eliminate the concentrated distribution and the timing correlation in the noise signal, so as to obtain a real random number sequence with high quality. The principle of the present invention is based on the unpredictable property of the thermal noise in quantum mechanics. Thermal noise is extracted and used as the source of actual random number, and the characteristics of the hash algorithm such as scrambling/diffusion and compression in cryptography is utilized to relieve the concentrated distribution and the timing correlation in the noise value, and to greatly improve the statistical quality of the random number sequence. In addition, by using different sources of random number to form the random number sequence, the degree of difficulty in guessing the system random number can also be increased proportionally.

Description

200418266 (Sales of the technical field, prior art, content, implementation, and drawings of the sales [Technical Field to which the Invention belongs] x The present invention relates to a random number generator using a sound card, especially a personal computer Or the sound card on the Unix station, the noise value on the Namac solution is used as the original value of the M-number sequence, and then the concentrated distribution and the back-and-forth correlation in the noise signal are eliminated to obtain a high-quality chaos of the real random number sequence. Number generator. [Previous technology] A high-quality random number generator plays a very important role in many application systems, such as: security systems, computer games, color selection, system simulation, etc. Currently in computer systems The random numbers used can be divided into two categories: · Virtual random numbers produced by software algorithms, and the use of Emei events on the hardware · Shape data # 健 魏 数 丝 源. Although Qunew can have some good performance in statistical distribution , But it is a predictable output in nature. A certain initial value produces a certain virtual disorder value, and its randomness is no better than a certain natural number How much better. In addition, unpredictable random numbers occupy a critical position in many application systems, such as: The keys required for cryptographic calculations should have no __ nature in order to ensure the security of the system. However, in general The random numbers generated on the computer system are calculated by software algorithms from a given starting value. This kind of seemingly random values are arranged in order and lack randomness. At present, computer efficiency can already be used in When it is reasonable _ to complete the analysis and _ its law of random numbers. Random numbers that are really randomly generated without any regularity to be predicted need to be generated by hardware, such as using thermal noise from electronic components as a source of random numbers, which is based on Unpredictability of electron free movement in the theory of uncertainty of quantum mechanics. However, how to collect thermal noise on the radon element in a general computer environment 3 Continued pages (when the invention description page is insufficient, please note and (Using continuation page) 200418266 Invented that splitting and drawing is not easy.-Generally, the dedicated hardware is inserted into Rs_232 or USB, and then the noise generated by the hardware is captured by the driver, but this is done. However, it increases the cost and inconvenience of hardware and installation. In view of the increasing importance of high-quality random numbers in computer systems, the secret version of the company also provides real random numbers generated by the hardware on the CPU in future versions. It still needs to install and set random number driver, and there are some inconveniences. It can be seen that there are still many shortcomings in the above-mentioned conventional technology, which is not a good designer, and it needs to be improved. In view of the above Various shortcomings derived from the conventional random number generation method are eager to read for improvement and innovation, and after years of painstaking research, finally successfully developed this random number generator using a sound card. [Objective] The purpose of the present invention That is to provide a random number generator using a sound effect card. The sound effect card commonly installed on a personal computer or a Unix workstation is used to capture the noise value on the microphone as the source of the random number sequence. There is no need to install a specific driver. Or make any settings, which greatly changes the convenience of use and still has unpredictable hardware random quality. In addition, In addition to the treatment of noise Yao Deviation signals, take the results of theoretical and experimental analysis of the obtained processing functions designed to take into account the system performance at the best quality random number. A second object of the present invention is to provide a random number generator using a sound card, which uses unpredictable thermal noise as the original value of the random number, and then uses a carefully designed cryptographic hash algorithm to scramble the signal. The obtained real random number sequence has excellent performance on various main randomness evaluation indexes. □ Continued pages (If the description page of the invention is insufficient, please note and use the continued pages)

Another object of the present invention is to provide a random number generator using a sound card to perform a post-processing operation of a random number sequence by using a 512-bit one-way hash algorithm, which not only improves the quality index value of random numbers, but also eliminates The possibility of cracking the original noise sequence in reverse. In addition, the high-resolution time value of the system and the random number input button are read for mask processing, which further increases the difficulty of the occupational test of the random number sequence. The random number generator using a sound card that can achieve the above-mentioned object of the invention is achieved by the following principles: Unpredictability of the free movement of electrons in the uncertainty principle of quantum mechanics, the thermal noise is captured to obtain the P-pass The initial value of the random number and the confusion, diffusion, and compression properties of the hash function of the hunting code science, to remove the deviation distribution of the noise signal. In addition, the one-way nature of this hash function can also eliminate the possibility of backward inference of the original noise value; combining several different random random number sources to form the final random number sequence can increase the system random number in proportion. Difficulty of guessing. These principles and several experimental results and their applications are described in detail as follows: 1. Thermal Noise (Thermal Noise or White Noise): Thermal noise is discovered by J.BJ.hns〇n, also known as J. hns〇nn〇ise, this kind of noise comes from the random movement of electrons inside the resistive element, and its strength is proportional to the absolute temperature of the resistance environment; the existence of this noise can be known by the following experiments: The general resistance device without any power supply is at room temperature. At this time, this resistance should not measure any voltage value, but it can be measured by using a precise electronic voltmeter instead of a DC voltmeter. With a random voltage value. This thermal noise is based on the uncertainty principle of quantum mechanics and has truly unpredictable randomness. □ Continued pages (When the description page of the invention is not enough, please note and use the continuation page) 200418266 The invention says that r, ¢-'~ Thermal noise can be generally expressed by the following formula: v »= 4kTR (f), where & is The average squared value of the voltage drop caused by thermal noise; k is the Boltzmann constant = ι. 38 X 1〇J / K; T is the absolute temperature; [is the frequency of the response; R (f) is the impedance value of the photovoltaic element Is generally a function of frequency; it is the frequency bandwidth. Let R (f) be a fixed value, let R (f) = R, △ £ = B, then the noise of the above formula can be represented by an equivalent circuit, where the voltage source is thermal noise = 4kTRB = Kw2, or current The source is is2 = 4KTB / R. Second, the effect of the sound card with or without a microphone on the chaotic value: Xin test separately: (1) without a microphone; (2) with a microphone but no sound input; (3) with a microphone but a monotone sound input; (4) Plug in the microphone and give a variety of sound input; wait for four cases to perform random numerical analysis of the input signal, and learn that the signal obtained in the (4) case is the richest random signal. Then follow (3) and Case (2) 'is the last case (1). But the difference between the four is not large, especially for the index of chi-square distribution. Therefore, the design of the present invention can ignore the factor of whether a microphone is inserted into the sound card, but it is necessary to detect whether the hardware of the sound card is abnormal and generate a fixed input signal, because the chaos obtained in this special situation Number sequences cannot have good random properties. 3. The influence of the input / output length of the hash function on the random value: The entropy value of an random number sequence (Entropy) is based on the formula of entropy in information theory: HI [Pi * (-log 〇) accumulates every possible The probability of the output is multiplied by its negative value. So you can guess whether the longer the hash input value and the longer the hash output value can improve the quality of the random number sequence.] Continued page (when the invention description page is insufficient, Please note and use continuation pages) 200418266

Observe the hash function in the random number post-processing program of the present invention in: (1) different input data lengths; (2) different output hash value lengths; and the influence on the quality of random numbers in two cases. The results show that after the input data exceeds a certain length (several bytes), there is no significant effect on the quality of random numbers. However, different output hash value lengths will affect the entropy of random numbers. The longer the hash value, the higher the entropy value. But the hash value length has no significant effect on the Chi Square distribution value of the random sequence. Therefore, the present invention can use a longer hash function to perform the post-processing operation of the random number sequence to obtain better random number quality. As for the length of the input data, although theoretically increasing its value can increase the randomness of random numbers, usually it will not have a significant improvement after it exceeds a certain length (depending on different operating systems and sound card settings). . In practical design, the length of input data is usually not small enough to affect the quality of random numbers. Therefore, the input data length of the hash function should be increased as much as possible in the case of meeting system performance requirements. [Preferred Embodiment] The present invention uses a sound effect card to produce a high-quality random number sequence. The production process can be divided into two procedures, namely, a thermal miscellaneous fetching procedure and a random value post-processing procedure. The thermal noise acquisition program uses a sound card that is commonly installed on a personal computer or workstation to read the sound hit signal without plugging in a microphone and determine whether the input signal is normal or not. The post-processing program depolarizes these thermal noises to obtain high-quality and unpredictable random numbers. I. Thermal noise processing procedure: First read the sound signal of a certain data length from the sound card. INaud = ReadMicrophone (INPUT BUFFER SIZE) Take ⑽ to indicate the noise value of the input sound card, and INPUT_BUFFER_SIZE is read each time. Data length 'can be set at the time of system installation, and its maximum value depends on the system generating the final random number of continuation pages (when turning pages is not enough, please remember and make the title page). The minimum value depends on the change period of the microphone signal and the length of the hash function after the random number is processed. The principle of determining the length is that if the signal on the sound card does not have enough change patterns under a certain sampling length , Then this length should be set to the minimum value of INPUT-BUFFERJSIZE to obtain randomness of random numbers, and this minimum value should also be greater than the length of the hash function processed after the random numbers; The speed of the random number sequence is also slower, so a trade-off must be made between these two factors to determine the appropriate INPUT_BUFFER_SIZE. Application systems that require more randomness can increase IN PUT_BUFFER-SIZE, and those who are concerned with the performance of the system take the minimum. That is: 512 bits S INPUT_BUFFER SIZE $ INPUT_BUFFER SIZE for minimum RNG speed In order to help users effectively set the INPUT_BUFFER_SIZE value when installing the random number generator system, the present invention provides a microphone signal analysis Tool program to help find the best INPUT-BUFFER-SIZE value during the installation process; this tool refers to the Entropy value of the microphone input signal and continuously tests different read lengths (from 64 to 256 bytes, with 32 Bytes are incremented units), and then find the INPUT-BUFFER_SIZE which can produce the largest Entropy value in a shorter read length as a parameter, and write it into the system configuration file; If the system's execution performance is too slow under this read length setting, users can edit this configuration profile by themselves to reduce the inputjbuffER_size value to obtain the required execution performance. When the system reads these input signals for the first time, a signal value analysis will be performed to determine whether the microphone is in a normal state and can provide random thermal noise, so as to avoid the poor quality of random numbers caused by the failure of the sound card hardware; judgment The method is based on the correlation between the front and back of the signal. G] Continued pages (If the description page of the invention is insufficient, please note and use the continued pages) 11 200418266

If the absolute value of the serial correlation coefficient of INaud is greater than 〇9, it should be regarded as a hardware failure, and the error message of the system is not executed. If the absolute value of the phase secret number is between 0.7 and 0.9, Continue to read more sample signals to proceed.

ComputeCorrelationCoefficient The correlation coefficient iNscc (INaud) of the input noise value; if the absolute value of the correlation coefficient obtained by continuous sampling is between 〇7 and 〇09, the system will return an error message and terminate the execution after 5 sampling tests. Second, post-processing of random values: The post-processing program of random numbers uses the characteristics of confusion, diffusion, and compression of the hash algorithm in cryptography to eliminate the centralized distribution of voice input values and the front-back correlation, and can greatly improve Statistical quality of random numbers.

Outhash = SHA_512 (INaud)

Outhash indicates the random number output value obtained after the 512-bit hash algorithm operation of SHA1. The INaud length of the input signal should not be less than 512 bits, so as to avoid reducing the randomness of the output value of 0uthash. In addition, in order to increase the difficulty of guessing the random number sequence, the high-resolution time of the system is read separately, and the value of less than seconds is used for SHA-1 calculation. |

Timehash = SHA "(SysTimehigh_res) At this time, the high-resolution time SysTimehigh" es below the system second is subjected to SHA-1 operation to obtain a 160-bit hash value Timehash and XOR operation with Outhash obtained previously. This XOR operation and No padding of data is performed.

RandomOutput = Outhash XOR Timehash. Therefore, the random number generator uses the thermal noise on the sound card to generate random output values up to 512 bits. If the random number length is still not enough for the application system, then the application system only needs to repeat. Beer call continuation page (when the description page of the invention is insufficient, please note and use the continuation page) 12 200418266 Weng Ming random number generator, you can get the required random number length. Generally speaking, this output value will have the following random quality indicators:

Entropy value Chi square distribution of random numbers Predicted values Arithmetic mean Monte Carlo Peripheral correlation coefficient is about 98% 25 to 75% 97 to 990 / 〇 Correct rate 0 · 5 to 4.0% Error rate about 0.01 The above Entropy value indicates the Information density, in theory, closer to 100% means that Lu has less redundant information, that is, the ideal degree of clutter; the random number prediction value of the Chi square distribution can be used to distinguish whether a random number sequence belongs to Expected virtual random number sequence, or real random number output that is difficult to predict. If the calculated Chi square prediction value is greater than 99% or less than 1%, it means that this random number sequence can be determined as a non-random output. If the value is between 95% and 99% or between 1% and 5%, the random number sequence is not random enough. The ideal Chi square prediction value should be between 10% and 90%. The Chi square value measured by the virtual random number sequence and the real random number sequence of the hardware is compared, and it is confirmed that the predicted value of the random number of the Chi square distribution is suitable to be used as an index to distinguish the virtual random number. The random number sequence produced by the present invention has a predicted chisquare value of 25 to 75 ° /. Between, that is, random and unpredictable. The operation flow for generating random number sequences in the present invention can be divided into two procedures: thermal noise acquisition and random value processing. There is also the operation of setting the system to read the length of the microphone signal each time. The process is described as follows: 1. The setting process of the microphone signal reading length (as shown in Figure 1) ...] Continued on the next page (turning over the bribe is not enough, please note to avoid the title page) 13 200418266

1. Perform a loop to record the Entropy value of the microphone noise, read the length from 64 to 256 bytes, and increase 32 bytes each time; 2. Read the microphone signal three times according to the length, and calculate its £ ntr. The average and weighted value of py, the weight of the difference is W = E + 17 / L. Among them, E means the average value of Entropy, and L means the length of the read signal; record these data in the data structure; 3. find the 3 most weighted values from all analysis records, write them to the system group tragedy file in descending order, write The input format is · L = dd, E = d.dd, W = d. (D indicates the number) 2. The thermal noise acquisition process (as shown in Figure 2): 1. If it is the first time to call, read the system configuration configuration file to obtain the INPUT_BUFFER_SIZE value; 2. The length of the signal input of the system configuration file. Read the thermal noise on the microphone to get it. (2 KeadMierophaneONPUT_BUFFER_SIZE); if it is the first time that the random number generation function is executed, you need to perform 3 · to analyze the microphone hardware state, otherwise skip to 4 ·; 3 · calculate the absolute correlation coefficient of the input signal value Value, if its value is greater than 0, it should be regarded as a hardware failure, the system returns a relative error message and terminates execution; INscc = ComputeCorrelationCoefficient (INAUD);

If (INscc > = 0.9) return HW ERROR;

If (〇.7 < INscc < 〇.9) {TRY ^ NO ++; if (TRY N〇 > 5) retum HW_ERROR; GOTO step 3;}; The absolute value of the right correlation coefficient is between 0.7 and 〇 · Between 9, continue to read more sample signals to further determine the state of the hardware; absolute values below 07 belong to the normal state of the hardware, D continued pages (when the invention description page is insufficient, please note and Use continuation page) 200418266

Pass the test of the sound card and mark the flag of the hardware status. If the correlation coefficients obtained by continuous sampling are between 0.7 and 0.9, the system will return an error message and terminate the execution after 5 samplings. 4. Store the input signal value to complete the thermal noise Information operation procedures. 2. Random number post-processing (as shown in Figure 3): 1. Calculate the SHA-1 512bit hash function value of the thermal noise data: Outhash == SHA—512 (INaud); 2. Read the high resolution of the system Time, just take the value below second and perform SHA_1 operation; the high-resolution time below this second can reach nan〇sec〇nd on Unix and millisecond accuracy on wind〇ws system;

Timehash = SHA—1 (SysTimehigh—res); 3. The hash value of step 1. and the hash value of the high-resolution time obtained in step 2 are used as a post operation. This operation does not perform data padding. ;

RandomOutput = Outhash XOR Timehash; 4. Clear the input signal value and return the result obtained in step 3. as a round-robin value; complete the random post-processing procedure. The preferred example of the present invention: The random number generator of the present invention can be fine-tuned in the procedures of SSL return and hand negotiation and money production system to meet the speed and quality requirements of the random number generator. The procedure is as follows: SSL server Continued page (When the description page of the invention is insufficient, please note and use the continued page) 200418266

Step 1: Receive the Hello message from the client;

ClientHello ◄- Step 2: Because it is the first time that the SSL feeder performs the random number function of the sound card, you need to read the system configuration setting building to obtain the INPUT_BUFFER_SIZE parameter value. Step 3: The system calls the random number of the sound card The thermal noise acquisition function of the generator INaud = ReadMicrophone (INPUT_BUFFER SIZE); Step 4: Because this is the first time that the random number function of the sound card is executed, the absolute value of the correlation coefficient of the signal needs to be calculated to determine the absolute value of the correlation coefficient of the hardware state;

INscc = ComputeCorrelationCoefFicient (INAUD);

If (INscc > = 0.9) return HW ^ ERROR;

If (0.7 < INscc < 0.9) {TRY NO ++;

If (TRY—NO > 5) return HWJERROR; GOTO Step 3; Set hardware inspection flag; □ Continued page (If the description page of the invention is insufficient, please note and use the continued page) 16 200418266

Step 5: Calculate the SHA-i 512bit hash function value of the thermal noise data Outhash = SHA J12 (INaud); Step 6: Read the high-resolution time below the system second, and perform SKA-1 operation to obtain the secret red Hash value

Timehash = SHA—l (SysTimehigh res);

Step 7: Perform the XOR operation on the hash value of the signal in step 4 and the hash value of the high-resolution time obtained in step 5, and do not perform data length padding processing here;

RandomOutput = Outhash XOR Timehash; Step 8:

ServerHello.random = RandomOutput; then the SSL server composes a Hello message in response with the random value obtained in step 6 and sends it back to the client. SSL server

SSL guest

ServerHello

ServerHelloDone Continued Page (If the description page of the invention is insufficient, please note and use the continuation page) 17 200418266 _ | Sincerity --- ^ L --- The random number generator using the sound card provided by the present invention, and other The conventional technology is compared with each other, and it has the following advantages: First, the invention uses a random number production device of a sound effect card, which uses a personal computer or a workstation generally equipped with a sound effect card, and the voice value on the microphone is used as a random number paste. Source, there is no need to install a specific driver or make any settings, which greatly improves the convenience in use and still has unrewardable hardware training quality. In addition, in the processing of the instinctivity of _ Yincheng, The results obtained by theoretical and experimental analysis are used to design the post-processing function, taking into account the system performance under the best random number quality. 2. The invention uses a random number generator of a sound card, which uses unpredictable thermal noise as the original value of the random number, and then uses a carefully designed cryptographic hash algorithm to scramble the signal to obtain a real random number sequence. It has excellent performance on various major randomness evaluation indicators. 3. The random number generator using a sound effect card of the present invention uses a 512-bit one-way hash algorithm to perform a post-processing operation of a random number sequence. Noise sequence possible. In addition, the high-resolution time value of the system and the random number output value are read for mask processing, which further increases the difficulty of guessing the random number sequence. The above detailed description is a specific description of a feasible embodiment of the present invention, but this embodiment is not intended to limit the patent scope of the present invention. Any equivalent implementation or change that does not depart from the technical spirit of the present invention should be included in Within the scope of the patent in this case. In summary, 'This case is not only technically innovative, but also enhances the above-mentioned multiple effects over conventional items. It should have fully met the statutory invention patent requirements of novelty and progress, and applied in accordance with the law. We ask your office to approve this. Application for invention patents, to encourage invention, to the utmost. [□ Continued pages (If the description page of the invention is insufficient, please note and use the continued pages) 18 200418266

[Brief description of the drawings] Please refer to the following detailed description of a preferred embodiment of the present invention and the accompanying drawings for further understanding of the technical content of the present invention and its purpose and effects. The drawings related to this embodiment are: One is a flowchart for setting a microphone signal reading length of a random number generator using a sound effect card according to the present invention; FIG. 1 is a flowchart for capturing and judging thermal noise of a gift number generator using a sound effect card; and FIG. The random number generator using the sound effect card processes the flowchart after the random number sequence.

Claims (1)

200418266 Patent Application Scope 1. A random number generator using a sound card is a method for generating high-quality random number sequences by using thermal noise on the sound card. Its architecture includes a universally installed on personal computers and Unix workstations. Sound card, microphone signal acquisition interface, library of the random number generator and a tool program for setting the length of the signal read by the microphone; the process of producing random numbers can be divided into the pre-processing of thermal noise acquisition and analysis and The random number sequence is followed by two parts. 2_ The random number generator using a sound effect card as described in item 1 of the scope of patent application, wherein the pre-processing program includes a method for reading the length of the thermal noise and a method for judging the usable state of the microphone hardware; thermal noise The read length must be set to achieve the best random number quality under the performance required by the system. The method of determining the hardware availability status is based on the correlation between the signals before and after, which can avoid the failure of the sound card hardware. Inferior quality of random numbers. 3. The random number generator using a sound effect card as described in item 1 of the scope of the patent application, wherein the post-processing program includes the selection of a 512-bit one-way hash function, the random number sequence combined with the high-resolution time of the system, and other processing Steps: Selecting a longer hash value is based on the results obtained from theoretical and experimental analysis, which can increase the entropy value of the random number sequence; while combining the high resolution time of the operating system to form the final random number sequence, the random number can be increased in proportion The difficulty of guessing the sequence. 4. The random number generator using a sound card as described in item 1 of the scope of patent application, wherein the tool program for setting the microphone to read the signal length, and the signal analysis and evaluation process and settings can be found in a short reading Take the parameter that produces a larger entropy at length. 20