Assessing cryptographic entropy

摘要

Systems, methods, software, and combinations thereof for evaluating entropy in a cryptography system are described. In some aspects, sample values are produced by an entropy source system. A typicality can be determined for each of the sample values. A grading is determined for preselected distributions based on the typicalities of the sample values. A subset of the preselected distributions are selected based on the gradings. An entropy of the entropy source system is calculated based on the subset of the plurality of distributions.

主权项

1. A method for assessing entropy in a cryptography system, the method comprising:
obtaining a sample value produced by an entropy source system; determining a typicality grading for each of a preselected plurality of probability distributions, the typicality gradings providing a comparison among the plurality of probability distributions, the typicality grading for each individual probability distribution being determined based on the cumulative probability of values that are, according to that individual probability distribution, less probable than the sample value; wherein the typicality grading gk(x,p) for each individual probability distribution is determined according to:gk⁡(x,p)=(∑y:Pp⁡(y)