Software Random Bit Generators and the NIST SP800-90B Entropy Standard (N23a)
Evaluation of the amount of entropy provided by a random bit generator (RBG) is an area which NIST has standardised in SP 800-90B, and which is now mandatory as part of FIPS 140-3 certification. This talk looks at prominent software RBGs and compares them to the NIST SP 800-90B standard requirements. We show that existing software generators may have difficulty meeting the requirements and discuss possible solutions.