Quantum random numbers can pass the tests and still leak clues to attackers
ETSI guidance warns quantum RNGs can pass statistical tests yet still leak predictable clues.
ETSI technical report TR 104 171 gives guidance on building and evaluating quantum random number generators. It says output can pass statistical randomness tests while implementation flaws still reveal clues about future numbers. The report follows entropy from the quantum source through processing, fault detection, tamper resistance, side channels, and delivery to applications. It recommends entropy zero trust, hardware shielding, continuous monitoring, and logs, and notes AI might help attackers find patterns in sensor, power, or processor noise.
- ETSI TR 104 171 covers QRNG design, evaluation, and operational monitoring.
- Outputs can pass statistical tests while still leaking clues about future numbers.
- Sensors, power supplies, and processors can add partly predictable noise.
- Side channels include power consumption and electromagnetic emissions.
- Guidance urges entropy zero trust, shielding, logging, and secure delivery.
From the original article
2 min read at helpnetsecurity.com
The European Telecommunications Standards Institute’s (ETSI) technical report, ETSI TR 104 171, offers guidance on building and evaluating quantum random number generators (QRNGs). It focuses on weaknesses in the devices and their supporting systems that could make the numbers they produce less secure.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.