ETSI: quantum random number generators can pass tests and still leak clues to attackers

ETSI published technical report TR 104 171 with guidance on building and evaluating quantum random number generators (QRNGs). It warns that numbers can appear random in statistical tests while still giving attackers clues about future output through noise from sensors, power supplies and signal processors.

• ETSI TR 104 171 covers source verification, entropy extraction and runtime fault monitoring
• AI could help attackers spot patterns in noise from QRNG sensors, power supplies and processors
• Guidance recommends shielding hardware and an entropy zero trust approach for high-security use
• Devices should log generation time, running software and traceability of output