martes, 1 de marzo de 2016

Random Bit Generation Workshop 2016

Random Bit Generation Workshop 2016

NIST

Registration is now open for the Random Bit Generation Workshop, to be held on May 2-3, 2016 at NIST, Gaithersburg, Md.
NIST is in the process of completing the development of approved methods for random bit generation. This workshop will discuss SP 800-90B and SP 800-90C, as well as their validation by NIST's validation programs.

Register Now - There is no cost to attend this workshop. Registration will close on April 25, 2016. 




Join our Twitter Chat using #NISTRandomBit 
Information Technology Laboratory

Random Bit Generation Workshop 2016

Purpose:

Cryptography and security applications make extensive use of random numbers and random bits, particularly for the generation of cryptographic keying material. A key to initiate a cryptographic algorithm needs to be unpredictable and statistically unique, that is, to have at most a negligible chance of repeating the value of a previously selected key. Selecting a key at random ensures that there is no known structure to the key selection process that an adversary might be able to use to determine the key, other than by an exhaustive search.
NIST is in the process of completing the development of approved methods for random bit generation.
SP 800-90A has recently been revised. It specifies approved Deterministic Random Bit Generator (DRBG) mechanisms (i.e., algorithms) for generating random bits, given sufficient entropy in their seeding process.
SP 800-90B addresses the entropy sources needed to seed the DRBG mechanisms and includes both health tests and validation tests. A new draft of SP 800-90B is available for public comment. The public comment period for this document ends on May 9, 2016. The specific areas where comments are solicited on SP 800-90B are:
  • Post-processing functions (Section 3.2.2): We provided a list of approved post-processing functions. Is the selection of the functions appropriate?
  • Entropy assessment (Section 3.1.5): While estimating the entropy for entropy sources using a conditioning component, the values of n and q are multiplied by the constant 0.85. Is the selection of this constant reasonable?
  • Multiple noise sources: The Recommendation only allows using multiple noise sources if the noise sources are independent. Should the use of dependent noise sources also be allowed, and if so, how can we calculate an entropy assessment in this case?
  • Health Tests: What actions should be taken when health tests raise an alarm? The minimum allowed value of a type I error for health testing is selected as 2-50. Is this selection reasonable?
SP 800-90C specifies constructions for creating random bit generators from entropy sources and DRBG mechanisms. A new draft of this document will be available for review and comment prior to the workshop.
This workshop will discuss SP 800-90B and SP 800-90C, as well as their validation by NIST's validation programs.
Reference Documentation: Copies of NIST SP 800-90B and NIST SP 800-90C will not be available at the workshop. If you'd like to reference either document while at the workshop, please print a copy to bring along.
Submissions
NIST is soliciting papers, presentations, and participation from any interested parties. Topics include, but are not limited to:
• Random number generation
• Entropy and noise sources
• Entropy estimation
• Conditioning components
Submissions must be provided electronically in PDF format. Please submit the following information to rgb_comments@nist.gov by March 31, 2016:
• Abstract of the paper or presentation
• Contact details of the authors, and
• (Optional) finished paper or presentation
Submission deadline: March 31, 2016
Notification: April 12, 2016
Presentations submitted by: April 27, 2016

Agenda:

Monday, May 2, 2016
Morning I
Welcome and workshop purpose
High level overview of SP 800-90B and SP 800-90C (describing the changes)
Break (refreshments available for purchase in the cafeteria)
Morning II
Test discussions (Restart tests, IID and non-IID tests, health tests)
Vetted and non-vetted conditioning components
Using multiple noise sources
Code package
Lunch Break
Afternoon I
Vendor Presentations
Break (refreshments available for purchase in the cafeteria)
Afternoon II
New approaches

Tuesday, May 3, 2016
Morning I
CAVP and CMVP related issues
Break (refreshments available for purchase in the cafeteria)
Morning II
Submissions
Lunch Break
Afternoon I
Submissions
Break (refreshments available for purchase in the cafeteria)
Afternoon II
Open discussions
Closing

Security Instructions:

If you are not registered, you will not be allowed on site. Registered attendees will receive security and campus instructions prior to the workshop.
NON U.S. CITIZENS PLEASE NOTE: All foreign national visitors who do not have permanent resident status and who wish to register for the above meeting must supply additional information. Failure to provide this information prior to arrival will result, at a minimum, in significant delays (up to 24 hours) in entering the facility. Authority to gather this information is derived from United States Department of Commerce Department Administrative Order (DAO) number 207-12. When registration is open, the required NIST-1260 form will be available as well. *New Visitor Access Requirement: Effective July 21, 2014, Under the REAL ID Act of 2005, agencies, including NIST, can only accept a state-issued driver’s license or identification card for access to federal facilities if issued by states that are REAL ID compliant or have an extension. See the NIST Visitor Page for more information.

No hay comentarios: