[Resource Topic] 2024/1421: Provable Security of Linux-DRBG in the Seedless Robustness Model

Welcome to the resource topic for 2024/1421

Title:
Provable Security of Linux-DRBG in the Seedless Robustness Model

Authors: Woohyuk Chung, Hwigyeom Kim, Jooyoung Lee, Yeongmin Lee

Abstract:

This paper studies the provable security of the deterministic random bit generator~(DRBG) utilized in Linux 6.4.8, marking the first analysis of Linux-DRBG from a provable security perspective since its substantial structural changes in Linux 4 and Linux 5.17. Specifically, we prove its security up to O(\min\{2^{\frac{n}{2}},2^{\frac{\lambda}{2}}\}) queries in the seedless robustness model, where n is the output size of the internal primitives and \lambda is the min-entropy of the entropy source. Our result implies 128-bit security given n=256 and \lambda=256 for Linux-DRBG. We also present two distinguishing attacks using O(2^{\frac{n}{2}}) and O (2^{\frac{\lambda}{2}}) queries, respectively, proving the tightness of our security bound.

ePrint: https://eprint.iacr.org/2024/1421

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .