关于IoT中伪随机数生成（PRNG）的准则
A Guideline on Pseudorandom Number Generation (PRNG) in the IoT
摘要：
随机数是物联网（IoT）上许多功能的重要输入。随机性的常见用例范围从低级数据包传输到人工智能的高级算法以及安全和信任，这些都严重依赖于不可预测的随机源。然而，在受限的IoT中，由于资源有限、确定性实时操作以及经常缺乏用户界面，不可预测的随机源是一个具有挑战性的需求。在本文中，我们从需要支持通用或加密安全随机数的物联网操作系统（OS）的角度重新审视了随机性的生成。我们分析了潜在的攻击面，得出了常见的要求，并讨论了当前物联网操作系统的潜力和缺点。基于完善的测试套件和测量性能的实验，对当前物联网硬件组件和流行的软件生成器进行了系统评估，并就如何构建这样一个随机子系统以及使用哪些生成器提出了一系列明确的建议。
英文摘要：
Random numbers are an essential input to many functions on the Internet of Things (IoT). Common use cases of randomness range from low-level packet transmission to advanced algorithms of artificial intelligence as well as security and trust, which heavily rely on unpredictable random sources. In the constrained IoT, though, unpredictable random sources are a challenging desire due to limited resources, deterministic real-time operations, and frequent lack of a user interface. In this paper, we revisit the generation of randomness from the perspective of an IoT operating system (OS) that needs to support general purpose or crypto-secure random numbers. We analyse the potential attack surface, derive common requirements, and discuss the potentials and shortcomings of current IoT OSs. A systematic evaluation of current IoT hardware components and popular software generators based on well-established test suits and on experiments for measuring performance give rise to a set of clear recommendations on how to build such a random subsystem and which generators to use.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
