论文标题
物联网中关于伪数编号生成（PRNG）的指南
A Guideline on Pseudorandom Number Generation (PRNG) in the IoT
论文作者
论文摘要
随机数是物联网（IoT）上许多功能的重要输入。随机性的常见用例范围从低级数据包传输到人工智能的高级算法以及安全性和信任，它们在很大程度上依赖不可预测的随机来源。但是，在受限的物联网中，由于资源有限，确定性的实时操作以及频繁缺乏用户界面，不可预测的随机来源是一个充满挑战的愿望。 在本文中，我们从物联网操作系统（OS）的角度重新审视了随机性的产生，该系统需要支持通用或加密保护随机数。我们分析潜在的攻击面，得出共同的要求，并讨论当前物联网OSS的潜在和缺点。基于建立的测试套件以及测量性能的实验，对当前物联网硬件组件和流行软件生成器进行系统评估，会引起有关如何构建这样一个随机子系统以及要使用哪些发电机的明确建议。
Random numbers are an essential input to many functions on the Internet of Things (IoT). Common use cases of randomness range from low-level packet transmission to advanced algorithms of artificial intelligence as well as security and trust, which heavily rely on unpredictable random sources. In the constrained IoT, though, unpredictable random sources are a challenging desire due to limited resources, deterministic real-time operations, and frequent lack of a user interface. In this paper, we revisit the generation of randomness from the perspective of an IoT operating system (OS) that needs to support general purpose or crypto-secure random numbers. We analyse the potential attack surface, derive common requirements, and discuss the potentials and shortcomings of current IoT OSs. A systematic evaluation of current IoT hardware components and popular software generators based on well-established test suits and on experiments for measuring performance give rise to a set of clear recommendations on how to build such a random subsystem and which generators to use.
