Paper 2025/503

Max Bias Analysis: A New Approach on Computing the Entropy of Free Ring-Oscillator

Nicolas David, Thales (France)
Eric Garrido, Thales (France)
Abstract

This work introduce a new approach called Max bias analysis for the entropy computation of structures of Free Ring Oscillator-based Physical Random Number Generator. It employs the stochastic model based on the well-established Wiener process, specifically adapted to only capture thermal noise contributions while accounting for potential non-zero bias in the duty cycle. Our analysis is versatile, applicable to combinations of multiple sampled Ring Oscillator (RO) filtering by any function. The entropy computation takes as inputs the parameters of the thermal stochastic model and delivers directly a proven bound for both Shannon entropy and min-entropy to fulfill AIS31 and NIST SP 800-90 B. As an example, we apply the new methodology on an enhanced structure of TRNG combining several free-running Ring Oscillators filtered by a vectorial function built from a linear error correcting code that optimizes the functional performance in terms of [entropy rate/silicium area used] and that maintains the mathematical proof of the entropy lower bound as simple as possible.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Preprint.
Keywords
Ring OscillatorMO-TRNG · Thermal NoiseEntropyBiasHidden Wiener ProcessVectorial Conditioning
Contact author(s)
nicolas-i david @ thalesgroup com
eric garrido @ thalesgroup com
History
2025-03-19: approved
2025-03-17: received
See all versions
Short URL
https://ia.cr/2025/503
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2025/503,
      author = {Nicolas David and Eric Garrido},
      title = {Max Bias Analysis: A New Approach on Computing the Entropy of Free Ring-Oscillator},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/503},
      year = {2025},
      url = {https://eprint.iacr.org/2025/503}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.