Analysis of Underlying Assumptions in NIST DRBGs.
Wilson Kan · IACR Cryptology ePrint Archive · 2007
In [1], four different DRBGs are recommended for cryptographic purpose. Each generator is based on some underlying cryptographic concept. The article examines each of the concept to determine what are the necessary and sufficient conditions for the DRBG to be secured in its generation process. In addition, the effects of failure of typical cryptographic requirements of each underlying concept are discussed. From [5], permutation based DRBGs are never indistinguishable from a true random source. From [4], elliptic based DRBGs are secured given a set of problems regarding elliptic curve remains difficult. This article demostrates that a pseudo-random family is required for both hash based and HMAC based DRBGs.