Re: Quantum RNG (was: Use of TPM chip for RNG)

2006-07-08 Thread Travis H.

On 7/4/06, Taral [EMAIL PROTECTED] wrote:

On 7/4/06, Andrea Pasquinucci [EMAIL PROTECTED] wrote:
 About RNG, does someone in the list have any comment, ideas on this
 http://www.idquantique.com/products/quantis.htm

Why? Noise-based RNGs are just as random and just as quantum. :)


Hella fast.  Most of the RNGs based on electrical noise are not
particularly pure -- some even use noisy diodes, which are decidedly
predictable.  Those that bother to isolate out one noise phenomenon or
another sacrifice speed, and the average consumer won't have the
technical background to judge them on anything else.  Sampling faster
gives more bits, but no more randomness.  Overall, you're going to be
limited by temperature with electrical noise phenomena.

On the other hand, the quantis device appears to be simple,
straightforward, and clean.  But it's all sealed up in an opaque
container.  I asked them some questions about it and the person I was
speaking with didn't seem to understand why anyone would care about
what's in the module.

Note that they sell QC endpoints as well.  Very interesting company.
--
Resolve is what distinguishes a person who has failed from a failure.
Unix guru for sale or rent - http://www.lightconsulting.com/~travis/ --
GPG fingerprint: 9D3F 395A DAC5 5CCC 9066  151D 0A6B 4098 0C55 1484

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: Quantum RNG

2006-07-06 Thread James A. Donald

--
Andrea Pasquinucci wrote:
 About RNG, does someone in the list have any comment,
 ideas on this

 http://www.idquantique.com/products/quantis.htm

 Quantis is a physical random number generator
 exploiting an elementary quantum optics process.
 Photons - light particles - are sent one by one onto a
 semi-transparent mirror and detected. The exclusive
 events (reflection - transmission) are associated to
 0 - 1 bit values.

That is doing it the hard way.  The easy way is to
amplify shot noise or Johnson noise and feed it into a
shift register, with the output of the shift register
being mixed back in with the noise input, so that the
shift register contains a constant pool of continually
stirred entropy with fresh entropy being continually
stirred in.

When people use an microphone input with no microphone
as their major entropy source, they are using Johnson
noise as their entropy source, and doing the stirring in
software.

--digsig
 James A. Donald
 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
 2PU8nEsxKqJuKTcJtk5EoKYjFF0Uh/9Xr5sJ6nxm
 4YaYrOcfMCcakjCz0TyfilHAYuMSbGUG2qHHdxLBA

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: Quantum RNG (was: Use of TPM chip for RNG)

2006-07-04 Thread Andrea Pasquinucci
About RNG, does someone in the list have any comment, ideas on this

http://www.idquantique.com/products/quantis.htm

Quantis is a physical random number generator exploiting an elementary 
quantum optics process. Photons - light particles - are sent one by one 
onto a semi-transparent mirror and detected. The exclusive events 
(reflection - transmission) are associated to 0 - 1 bit values.

Just curious of your opinion.

Andrea
 
--
Andrea Pasquinucci [EMAIL PROTECTED]
PGP key: http://www.ucci.it/ucci_pub_key.asc
fingerprint = 569B 37F6 45A4 1A17 E06F  CCBB CB51 2983 6494 0DA2

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: Quantum RNG

2006-07-04 Thread John Denker
Andrea Pasquinucci wrote:
 
 http://www.idquantique.com/products/quantis.htm
 
 Quantis is a physical random number generator exploiting an elementary 
 quantum optics process. Photons - light particles - are sent one by one 
 onto a semi-transparent mirror and detected. The exclusive events 
 (reflection - transmission) are associated to 0 - 1 bit values.
 
 Just curious of your opinion.


This is discussed at
  http://www.av8n.com/turbid/paper/turbid.htm#sec-hrng-attack

Quantum processes are in some very narrow theoretical sense more
fundamentally random than other sources of randomness, such as
thermal noise ... but they are not better in any practical sense.

The basic quantum process is less sensitive to temperature than a purely
thermal process ... but temperature dependence is easily accounted for
in any practical situation, and -- more importantly -- there are all
sorts of other practical considerations (such as detector dead-time
issues) that make real quantum detectors far from ideal.

The devil is in the details, and obtaining the raw data from a quantum
process is nowhere near necessary and nowhere near sufficient to make
a good randomness generator.

I have no idea whether the quantis generator got the devilish details right
... but in any case, there are easier ways to make a generator that is just
as good, or better.

For details, see
  http://www.av8n.com/turbid/paper/turbid.htm


-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: Quantum RNG (was: Use of TPM chip for RNG)

2006-07-04 Thread Taral

On 7/4/06, Andrea Pasquinucci [EMAIL PROTECTED] wrote:

About RNG, does someone in the list have any comment, ideas on this

http://www.idquantique.com/products/quantis.htm


Why? Noise-based RNGs are just as random and just as quantum. :)

--
Taral [EMAIL PROTECTED]
You can't prove anything.
   -- Gödel's Incompetence Theorem

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]