Random Number Generation Failure Detection and Entropy Estimation

摘要

In accordance with one or more aspects, an initial output string is generated by a random number generator. The initial output string is sent to a random number service, and an indication of failure is received from the random number service if the initial output string is the same as a previous initial output string received by the random number service. Operation of the device is ceased in response to the indication of failure. Additionally, entropy estimates for hash values of an entropy source can be generated by an entropy estimation service based on hash values of various entropy source values received by the entropy estimation service. The hash values can be incorporated into an entropy pool of the device, and the entropy estimate of the pool being updated based on the estimated entropy of the entropy source.

主权项

1. A device comprising:
one or more processors; one or more computer storage media having stored thereon multiple instructions that, when executed by the one or more processors, cause the one or more processors to:
generate a hash value for a value of an entropy source of the device;send the hash value to an entropy estimation service;receive, from the entropy estimation service, an entropy estimate for the value that is based on both the hash value and hash values previously received by the entropy estimation service;incorporate the hash value into an entropy pool of the device; andgenerate a new entropy estimate for the entropy pool based on the entropy estimate for the value.