Software-Based True Random Number Generator (Strng) for Quality-Enhancement of Key Production in Symmetric and Asymmetric Cryptosystems

In a symmetric or asymmetric cryptosystem, the key production can be problematic whenever its random number generator (RNG) is not of high entropy quality. Despite its vulnerability that it can be predicted, the pseudo random number generator (PRNG) has been widely used instead, as it can work very fast. Some researchers have therefore attempted to develop true random number generators (TRNGs). Although their entropy is high, most of their entropy sources are hardware-based, and they can still be compromised by potential attackers. Tackling this issue, the research has successfully investigated and constructed a software-based true random number generator (STRNG). As the entropy sources are from threads (non-hardware), attackers would have difficulties to manipulate the activity of the threads. The result of the research shows that the STRNG's entropy is over 0.9 per bit and it is resilient against attacks on hardware. Additionally, the STRNG can generate random numbers with unlimited number of bits, and the constant bitrate can reach 3 kbps. The STRNG has also passed all the requirements of NIST's statistical test. Therefore, the STRNG is suitable to be used in the key production part of a symmetric or an asymmetric cryptosystem.