A FPGA-Based Post-Processing and Validation Platform for Random Number Generators

Computer security relies heavily on random numbers (RN) for key exchange of authentication algorithms. However, IoT device security is often based on poor quality PRNGs. This issue can be overcome using TRNGs that may offer better quality and higher security. Nonetheless, TRNG sources often provide slow throughput and require post-processing to correct hardware biases and ensure the desired statistical behavior. We propose a FPGA-based hardware platform able to validate and post-process multiple TRNG sources. A provably secure post-processing algorithm (SPRG) is implemented in hardware. This algorithm improves RN quality while maintaining high throughput. A platform providing hardware acceleration has been implemented on a Kintex-7 FPGA board. It tests the validity of the generated numbers through X² and SP800-90B online statistical tests and improves the bitstream randomness by using AIS-31 or SPRG post-processing hardware cores. The platform is modular and targets both back-end servers and IoT edge devices.