Ultra-Secure, Fast Random Number Generators
In a significant leap for computer security, researchers at KAIST, led by Professor Jooyoung Lee, have developed an advanced deterministic random bit generator (DRBG) that promises enhanced security and speed. DRBGs are essential in generating random numbers crucial for cryptographic systems, ensuring data privacy and security.
Existing DRBGs often fall short in terms of security and efficiency. However, the KAIST team has established a new theoretical framework to analyze permutation-based DRBGs, addressing these shortcomings. Deterministic random bit generators produce random numbers from entropy sources (random data from the environment), utilizing methods like block ciphers (transforming plaintext into ciphertext) and hash functions (converting input into a fixed-length digest).
One significant issue with previous DRBGs was the reliance on a technique called game hopping, which offered lower security guarantees. By simplifying this into a two-stage proof method, Professor Lee's team demonstrated a security level improvement of about 50%, achieving the theoretical maximum of min{c/2, λ} bits, where c is the capacity, and λ is the entropy threshold.
The innovative DRBG, known as POSDRBG (Parallel Output Sponge-based DRBG), addresses the limitations of the traditional sponge construction used in DRBGs like SHA-3. The sponge construction, which processes data sequentially, limited output efficiency. POSDRBG enhances this by allowing parallel processing, significantly boosting output speed while maintaining top-tier security.
Professor Lee noted, "POSDRBG represents a breakthrough in the speed and security of random number generation, suitable for use in both small IoT devices and large-scale servers." The team's research is anticipated to influence the international DRBG standard SP800-90A, potentially integrating permutation-based methods into this global guideline.
This groundbreaking research will be presented at the prestigious CRYPTO Conference, underscoring its importance in the field of cryptology. The study included contributions from KAIST researchers Woohyuk Chung and Seongha Hwang, with support from Samsung Electronics' Hwigyeom Kim.
As cyber threats become more sophisticated, advancements like POSDRBG are crucial in fortifying digital security frameworks worldwide.