RSA Security 4.3 Home Security System User Manual


 
Chapter 3 Using the Intel Random Number Generator 15
Random Numbers
Pseudo-Random Number Generators (PRNGs)
Crypto-C provides several pseudo-random number generators that can be seeded via
the Intel RNG and used to generate random numbers. The PRNGs in Crypto-C satisfy
mathematical tests that measure randomness and are considered cryptographically
secure. The Intel RNG can be used to provide a quick, secure seed to a PRNG. Once a
PRNG has been seeded, it produces output up to ten thousand times faster than a
hardware random number generator. In addition, a PRNG will not fail unless the
CPU does. For most applications, using a PRNG that has been randomly seeded by
the Intel Random Number Generator will provide the level of security needed, will be
faster, and will avoid any potential problems due to hardware failure.
A PRNG should be reseeded at least every 2
68
bytes of output.