ETSI Releases Technical Report Addressing Limitations and Implementation Guidance for Quantum Random Number Generators
ETSI (European Telecommunications Standards Institute) has published Technical Report ETSI TR 104 171, which provides crucial implementation guidance to mitigate weaknesses that could compromise the quality and security of Quantum Random Number Generator (QRNG) outputs. The report emphasizes that while QRNGs leverage inherently unpredictable quantum phenomena for randomness, an adversary with access to side-information can exploit apparent statistical randomness, undermining its true unpredictability. The report covers the entire QRNG lifecycle, from modeling and validating the quantum entropy source and applying appropriate randomness extraction, to monitoring entropy quality during operation and detecting drift, bias, and hardware failures. It also details methods to protect QRNGs against tampering and side-channel attacks, secure the path from the entropy source to the consuming application, and establish provenance, attestation, and auditability to ensure trustworthiness throughout the lifecycle. A key...
