back to article Researchers claim spoof-proof random number generator breakthrough

Scientists in the US have built a system for creating truly random numbers which cannot be tampered with by a third party. Random numbers might be needed to pick jury members out of a field without bias, or provide security algorithms. Quantum events offer the promise of true randomness. Meanwhile, a phenomenon called quantum …

  1. An_Old_Dog Silver badge

    Slow, Large, and Expensive Apperatus

    The research team generated random numbers 7,454 times in 40 days

    Yeah. Still waiting for my DnD dice-rolling program to finish running -- on a computer in a datacenter, and not on my laptop.

    1. Wang Cores

      Re: Slow, Large, and Expensive Apperatus

      This b amurica. We use mor sillicon an mor power for les everything

  2. Anonymous Coward
    Anonymous Coward

    It's the inverse of quantum key generation

    The article contains a rather superficial and abstract description. But I guess they use the same protocol that is used for quantum key distribution.

    When you generate a quantum key, you select the measurements with the same polarisation. If you select the measurements with the orthogonal polarizations, you should get purely random results.

    There is currently a lot of effort to do efficient and fast quantum key distribution. Progress is fast in this field (especially in China).

    This protocol will directly benefit from the quantum key generation progress, for free.

    Clever.

  3. Pascal Monett Silver badge

    "recorded publicly on a hash chain"

    What ?

    Did someone finally find a good use for blockchain ?

    And have they thought about scaling and concurrent use ?

    1. cdegroot

      Re: "recorded publicly on a hash chain"

      Hash chains predate bitcoin by quite a lot and have many useful applications. And one useless one, which is in cryptocurrencies :)

  4. ChrisElvidge Silver badge

    Jury selection

    Random numbers might be needed to pick jury members out of a field without bias

    As (some) jury members, in the US, can be rejected without cause, and others with cause, do we really need that level of security when initially selecting them?

    1. Rich 2 Silver badge

      Re: Jury selection

      Maybe the rest of the world (that’s not the USA) thinks they do? I don’t know

      1. Anonymous Coward
        Anonymous Coward

        Re: Jury selection

        In this part of AU juries are selected from a pool taken from the electoral roll but after the various disqualifications (eg holding a law degree), challenges and excuses, the pool is often not so large in regional centres.

        Her indoors was empanelled for one trial that resulted in a hung jury, nearly two years later the case was retried and she was again called for jury service (the eligible pool was so small) and legal numpties allowed her to be empanelled for the same case which would have been an automatic mistrial if the prosecution hadn't abandoned the case for other reasons.

        I don't think random numbers came into it at all.

        1. Like a badger Silver badge

          Re: Jury selection

          If she'd thought ahead she could have crammed a remote learning law degree into the intervening two years.

        2. Anonymous Coward
          Anonymous Coward

          Re: Jury selection

          A friend decided that the best way not to be selected for the jury in a trial for some local scrote was to turn up in an immaculate suit & tie, with a copy of the Daily Mail under his arm. It worked, the defence assumed he'd be too biased...

          1. bernmeister
            Thumb Up

            Re: Jury selection

            That approach works in other areas as well. On an Air India flight I was offered a free upgrade to business class because I was so well dressed.

        3. Anonymous Coward
          Anonymous Coward

          Re: Jury selection

          They exclude lawyers there?

          They don't in the US. In smaller cities there's a good chance they'll get tossed for cause, because there's a decent chance they'll know one of the lawyers involved in any given case. But they're absolutely called, and in bigger cities there's a chance they'll end up on a jury.

          About the only guaranteed exclusions are having a felony conviction, being under 18, or being active duty military. Mental disability can get you out of it, as can physical disability, but they're not guaranteed.

          1. Androgynous Cupboard Silver badge

            Re: Jury selection

            Lawyers are called in the UK too - to the surprise of my sister-in-law, who was called a couple of weeks ago. Apparently they used to be excluded in the UK, but no more.

            1. EvilDrSmith Silver badge

              Re: Jury selection

              Yup, I think the change was made about 2 decades ago, maybe a bit more.

              I believe the logic was that someone with legal training might 'lead' the jury on points of law, rather than a perceived risk that they would know anyone in the court

    2. Andrew Scott Bronze badge

      Re: Jury selection

      Both sides get an equal chance at selecting jurors from the pseudo randomly selected pool. Different states may have different pools to select from, but not all residents are known to the pool, and some are exempt because of age, health or other reasons. That's why trumps conviction was fair. everyone had the same opportunity to put their thumb on the scale. Here there is a mandatory town census every year to get the potential jurors other places may use driver registration or voter registration.

    3. nobody who matters Silver badge

      Re: Jury selection

      <....."Random numbers might be needed to pick jury members out of a field without bias".....>

      I am not sure that making any truly random selection of jurors would be in any way guaranteed to select 12 completely unbiased people. Most of the time it probably would achieve a varied mix, but I would expect that there would be a good liklihood that at some stage it would select 12 people all of whom would turn out to be highly biased.

  5. nobody who matters Silver badge

    Like many others around here, I have been around for long enough to realise that there is no such thing as 'Truly Random'.

    Many years ago I lost count of the number of things that were claimed to be tamper-proof which turned out to be no such thing. I have no doubt that someone will at some future date find a way round this too.

    1. b0llchit Silver badge
      Alien

      There is a 'Truly Random' and it was documented some time ago. But, I doubt you need that amount of randomness in your applications.

      1. Bill Gray Silver badge

        And, of course, the obligatory counterpart to the famed XKCD documentation :

        https://dilbert-viewer.herokuapp.com/2001-10-25

        1. Anonymous Coward
          Anonymous Coward

          von Neumann

          https://dilbert-viewer.herokuapp.com/2001-10-25

          The location in the strip would appear to indicate that this particular sin is mortal.

          (Are we again permitted to reference or regard Dilbert cartoons without the consequent sanction of external cancellation?)

          1. Anonymous Coward
            Anonymous Coward

            Re: von Neumann

            "(Are we again permitted to reference or regard Dilbert cartoons without the consequent sanction of external cancellation?)"

            No.

            Fuck off.

          2. FIA Silver badge

            Re: von Neumann

            Are we again permitted to reference or regard Dilbert cartoons without the consequent sanction of external cancellation?

            You probably are, yes.

            The problem with the digital world is the lack of any patina of time. Comments written 20 years ago are judged with the lens of society today.

            Now, I certainly made jokes or comments 20 years ago that I wouldn't do now, either through maturity or simply because they're not socially acceptable any more. (The term 'Gay' to mean 'rubbish' in the early 2000s is a good example) If I expect people to contextualise the things I say, I have to at least give them the same level of respect.

            Unfortunately that means we have to also accept it when the person in questions opinions go the other way. I have a friend who's well down the conspiracy rabbit hole. 20 years ago I respected his opinions on things, not so much now. That can be the same with Scott Adams.

            Also.. and this is a concept that's long been lost to the ages... but the truth is people are complex, I can enjoy Adams incites on workplace culture, whilst still disliking his views on other things.

            1. Anonymous Coward
              Anonymous Coward

              Re: von Neumann

              Quite. I can admire Woody Allen as a great director, but I wouldn't fancy him as a Dad. Or a lover. Or both, for that matter.

            2. Ian Johnston Silver badge

              Re: von Neumann

              Also.. and this is a concept that's long been lost to the ages... but the truth is people are complex ...

              A truth which Gen Z will come up against as they grow up. Meanwhile they display en masse the self-assurance and absolute believe in their own correctness which in my student days was only found in the loathsome creatures of the Christian Union.

              1. Bill Gray Silver badge

                Re: von Neumann

                s/Gen Z will come/each generation comes/

                There, fixed that for you. I really do think this is something each generation has to re-discover. (I certainly did. It's a good thing so-called "social" media didn't exist when I was a lad; I'd shudder to have some of my early opinions unearthed.)

    2. find users who cut cat tail

      Even though things like Bayesian interpretation of quantum mechanics or superdeterminism exist, quantum mechanical randomness behaves as ‘truly random’ as far as we know. We have ruled out all the naïve ideas that/how it is not actually truly random.

      And the other interpretations are generally of the type that results of QM measurements still appear truly random to us, just the universe is even crueller than you thought.

      1. ravenviz Silver badge

        As long as it seems as random to hackers as it does to everyone else then we’re fine.

        As for quantum AI using quantum computing then…

  6. Anonymous Coward
    Anonymous Coward

    Looking In The Wrong Place.....

    Quote: "...randomness which can be relied on..."

    Forgive me, but my personal choice for randomness is the Palace of Westminster!

    Recent random events:

    - Supercomputers in Edinburgh, or not, or maybe........

    - Winter heating supplement, or not, or maybe.....

    - Pacific Ocean presence.......but then the propellor fell off.....

    I'm sure other commentards here can establish a clear "randomness process" in London SW1......better than I can!

    1. John Brown (no body) Silver badge
      Thumb Up

      Re: Looking In The Wrong Place.....

      For true randomness, one only needs a nice hot cup of tea. The Palace of Westminster is probably awash with only the very best hot cups of tea, served by actual tea ladies wheeling trolleys around. Which may well explain your hypothesis :-)

  7. Anonymous Coward
    Anonymous Coward

    Thought Experiment

    (1) We have a "fair coin".

    (2) We toss the coin ten times.

    (3) It comes up "heads" every one of the ten tries.

    Most people (and most software assessments) would say the sequence of ten "heads" is not random......

    ......but, in this case, it is actually a random sequence............

    1. Andy Non Silver badge
      Happy

      Re: Thought Experiment

      I can do a magic trick with fair coins and get them to land heads or tails as I please every time. Neat party trick or for winning free beer. It appears impossible and leaves folks scratching their heads.

    2. Anonymous Coward
      Anonymous Coward

      Re: Thought Experiment

      (1) We have a "fair coin".

      How does one "know" the coin is "fair?"

      Leaving aside the question of the nature of knowledge an empiricist would minimally require you to perform a large number of coin tosses which should result in a binomial distribution around a mean of 50% head or tails and a variance of 0.25×Ntosses.

      Diabolically you might imagine an engineered coin that could arrange a particular outcome with a tiny internal gyroscope which could be indistinguishable from a fair coin but actually perfectly deterministic.

      I recall Bruce Schneier discussed sources of randomness in the context of cryptography, I think in his Cryptography Engineering, where it seems hardware sources weren't actually as attractive as one might have thought.

      1. Ian Johnston Silver badge

        Re: Thought Experiment

        Leaving aside the question of the nature of knowledge an empiricist would minimally require you to perform a large number of coin tosses which should result in a binomial distribution around a mean of 50% head or tails and a variance of 0.25×Ntosses.

        Not necessarily. It depends on how it was tossed and how the starting orientation was chosen. Start a coin heads up and "heads" requires 1, 2, 3, 4 ... full turns in the air while "tails" requires 1/2, 1 1/2, 2 1/2, 3 1/2, and these are not equally likely in sum.

    3. Primus Secundus Tertius

      Re: Thought Experiment

      You should repeat that experiment a thousand times. It would probably happen once. The probability of it not happening is 0.37. It might happen twice, but probably no more than that.

      The one sure prediction is that randomness is unpredictable.

  8. Neil Barnes Silver badge
    Boffin

    a truly random number was generated 7,434 times

    And just how did they ascertain that the remaining twenty numbers _weren't_ random?

    1. that one in the corner Silver badge

      Re: a truly random number was generated 7,434 times

      They were able to use them to unlock President Skroob's luggage

  9. ChrisElvidge Silver badge

    Random number?

    Your bank says "Pick a random 4 digit number for your PIN" and then refuses to allow 0000.

    Someone, somewhere should educate decision makers as to exactly what "random number" means.

    1. Richard 12 Silver badge

      Re: Random number?

      They probably use 0000 as "unset".

      They also tell you not to use several other 'special' sequences. While that reduces the search space, in practice an attacker only gets about three or four attempts so it doesn't matter much.

      Nearly all PIN related fraud is shoulder surfing, tampering with the machine or other ways of discovering the PIN directly.

    2. Someone Else Silver badge

      Re: Random number?

      "Pick a random 4 digit number for your PIN...but not that one..."

  10. PB90210 Silver badge

    https://ernie.virtualcolossus.co.uk/ernie.html

  11. elsergiovolador Silver badge
  12. Primus Secundus Tertius

    Not prolific

    Not exactly a prolific source of random numbers, e.g. for overwriting previous contents of a hard disk.

    The glib reply, I guess, is that you generate a billion pseudorandom numbers using a truly random seed.

    1. that one in the corner Silver badge

      Re: Not prolific

      > The glib reply, I guess, is that you generate a billion pseudorandom numbers using a truly random seed

      Why is that a "glib reply"?

      That is a perfectly sensible way of generating enough values to overwrite a drive or for other uses.

  13. Rich 2 Silver badge

    Why is this better?

    Why is this more random than, say, generating a bit sequence from the noise of a PN junction? Which (and I readily admit I’m not hugely familiar with this stuff) as far as I know has been used for years on account of its good randomness

    1. david 12 Silver badge

      Re: Why is this better?

      It's not. The article confuses the issue, which is forgivable, but some of the comments here also confuse the issue, which is less justifiable.

      This is a method of verification, which is intrinsically tied to the randomization. That is, the randomization can't be broken from the verification.

      The randomization isn't anything special, apart from being tied to quantum computing, which also has unique benefits not related to the quality of the randomization or the quality of the verification.

    2. bernmeister
      IT Angle

      Re: Why is this better?

      The randomness you are describing is impressive but is well known. In order to publish, novel ways of doing things need to be found. People will carry on inventing new ways of generating random numbers. I was going to say forever or until the cows come home but could not find a suitable epithet.

    3. bartsmit
      Holmes

      Re: Why is this better?

      It is, because that PN junction will have bias from the 60Hz power supply and the 3-5GHz processor clock. Randomness is not 'good' or 'bad' although it may be 'good enough'. Some applications need the level that this kit provides. Compare it with time keeping, which has equally bonkers levels of technology. You don't need atomic clocks to catch your bus but you do need them to confirm Einstein's predictions.

  14. Pelican Express

    What is a true random number?

    What is the criteria to determine if a number is truely random?

    1. Primus Secundus Tertius

      Re: What is a true random number?

      What are a criterion to determine if an English sentence be grammaticle!

    2. dmesg

      Re: What is a true random number?

      "Randomness" is a quality of an algorithm or device which outputs values, not of a number itself.

      The quality of a random number generator, roughly speaking, is the difficulty an adversary faces when trying to predict the next value, given knowledge of the generator's previous outputs and complete knowledge of its design.

  15. StrangerHereMyself Silver badge

    Futile

    Random number generators based on noise diodes are integrated into most CPU's and MCU's these days. There's very little to be gained from using quantum RNG's unless an adversary is able to hack their way into your network and computer. But being able to do that they wouldn't need to hack your RNG anyway.

    1. Richard 12 Silver badge
      Black Helicopters

      Re: Futile

      There are use cases where two parties need to be able to verify that the random numbers really are random, and not secretly controlled by the other party.

      Most people and organisations don't need that, but a very few do.

      1. Crypto Monad

        Re: Futile

        In that case, both parties can generate random numbers independently, exchange them, and then XOR them to get the final result.

        If there's a risk that one party sees the results of the other before committing to their random numbers, then exchange hashes first (and verify them after exchanging the actual random numbers).

  16. DS999 Silver badge

    What's wrong with using astronomical observations

    A radio telescope pointed at the black hole in the center our galaxy should be capable of generating a nice stream of very not spoofable numbers. You could even go beyond what these guys did and make it more trustworthy by pointing multiple radio telescopes in different countries at the same spot. Since they'd be geographically separated their observations would pass through different parts of the space around Earth. That would insure that Earth based satellites etc. (even ones not publicly known) can't "get in the way" as it were. Since you have multiple receivers you avoid technical faults being responsible, and since they're located in different countries they'd be operated by different groups making it harder to compromise them all to get the "random" numbers you desire.

    1. John Brown (no body) Silver badge
      Joke

      Re: What's wrong with using astronomical observations

      But what if the bad guys travel some distance towards your source of random numbers and collect them a few days before you do?

    2. ravenviz Silver badge
      Boffin

      Re: What's wrong with using astronomical observations

      https://physics.aps.org/articles/v11/s48

  17. Charles E

    Over-engineered

    I remember seeing an article in Byte Magazine in the 70s, showing how to make a truly random number generator. It was based on a small sample of radioactive material, the random number seeds were continually regenerated by detecting random alpha particle emissions. So it's a lot easier to use "quantum" effects that cannot be spoofed, than they would have you believe. If you know a way to predict or alter the random emission of particles emitted by decaying isotopes, please submit your techniques to the Nobel Prize committee.

    1. FIA Silver badge

      Re: Over-engineered

      It was based on a small sample of radioactive material, the random number seeds were continually regenerated by detecting random alpha particle emissions.

      Interesting idea.

      If you know a way to predict or alter the random emission of particles emitted by decaying isotopes, please submit your techniques to the Nobel Prize committee.

      Isn't the problem they're trying to solve one of tampering, not knowing that the source is random, but knowing that it's reached you uncompromised?

  18. Michael Hoffmann Silver badge
    Boffin

    Maybe they need random randomness?

    Many moons ago, when studying for my Master's I attended a unit on cryptography.

    Where my take-away would turn out to be exactly this topic: what is randomness?

    And learn that there are many kinds, and when dealing with these faddish computer thingies, you must make sure you choose the right one.

    Followed by diving into the maths and resulting algorithms (and their implementation in programming language XYZ), until I was sobbing uncontrollably.

    What's "useful" - and real - randomness to a mathematician, is different from what a scientist or medical researcher requires, and both of their requirements are useless, even disastrous from a security perspective, to a cryptographer.

  19. Anonymous Coward
    Anonymous Coward

    Random numbers

    I was a master at this during my school maths exams.

    Apparently the teacher wanted a particular number.

  20. sitta_europea Silver badge

    Let's try that again.

    First I tried to post just

    42

    but the site replied

    "The post is required, and must contain letters."

    Maybe someone could take a look at that error message.

    1. Anonymous Coward
      Anonymous Coward

      Re: Let's try that again.

      Forty two.

    2. chuckrman

      Re: Let's try that again.

      W - h - a - t - i - s - s- i - x - t - i - m - e - s - s - e - v - e - n. Must be drawn from a bag made from a perfectly normal beast (if memory serves)

  21. Ian Johnston Silver badge

    Who generates and stores the hash chain?

  22. Kurgan Silver badge

    Now if only we could trust...

    Ok, so we have a really expensive and very random RNG, fine.

    Now if only we could trust:

    - the people who generate the numbers (because we don't get to have such a system at home)

    - the software that uses the numbers

    - the hardware we run the software on

    - the microcode of such hardware

    then we would be fine.

  23. FIA Silver badge

    The research team generated random numbers 7,454 times in 40 days and found that a truly random number was generated 7,434 times, which they call a 99.7 percent success rate.

    I understand the way we use language evolves over time, so I accept I may just be hitting that age, but this seems like a really odd statement.

    Are we saying that maths is now open to opinion? (Or is it that it's ever so slightly over 99.7%?)

    1. Anonymous Coward
      Anonymous Coward

      Compare "random" and "retrospective"....Yup....they both begin with the letter "r"........

      Quote (from quote): "...a truly random number...."

      Sorry, but this phrase is about some RETROSPECTIVE ANALYSIS of a given string!

      Suppose you have a RANDOM PROCESS running, and once in a while this RANDOM PROCESS spits out "0000000000000000000" as part of the output.

      Please tell me how RETROSPECTIVE ANALYSIS can ASSERT that "THIS STRING IS NOT RANDOM".....when it clearly is randomly produced!

  24. JamesTGrant Silver badge

    I like the video camera pointing at a wall of lava lamps number generator. Seems a lot easier than a quantum computer - I could even put the shelves up myself!!

  25. chuckufarley
    Holmes

    But...

    ...I am your boss. We don't have the resources to check into every little alert from the monitoring system.

  26. Luiz Abdala Silver badge
    Joke

    Can you spoof a webcam filming lava lamps?

    Just asking. The lava lamps are a true RNG, but the camera filming them is definitely hackable... or not.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like