scope:

This Standard defines techniques for the generation of random numbers that shall be used whenever ASC X9 Standards require the use of a random number or bitstring for cryptographic purposes. The Standard consists of four parts:

• Part 1: Overview and Basic Principles

• Part 2: Entropy Sources

• Part 3: Deterministic Random Bit Generator Mechanisms

• Part 4: Random Bit Generator Construction

Part 1 contains:

1. A functional model for random bit generators,

2. The general properties necessary for random bit generators to produce bitstrings that are suitable for cryptographic use, and

3. Approved methods for converting a random number into a random bitstring and vice versa.

Part 2 contains:

1. An Entropy Source model,

2. Entropy Source properties, requirements and design criteria,

3. Examples of Entropy Sources, and

4. Implementation validation and health testing of Entropy Sources.

Part 3 contains:

1. A model for deterministic random number generators (DRBGs),

2. Requirements for DRBG mechanisms,

3. Specifications for Approved DRBG mechanisms, and

4. Implementation validation and health testing for Approved DRBG mechanisms.

Part 4 contains:

1. Methods to create an Approved RBG from components such as an Entropy Source, a Deterministic Random Bit Generator Algorithm, etc.

2. Implementation issues,

3. Application Program Interfaces, and

4. Tests and test guidance.

This Standard does not address random key stream generation for a stream cipher, as this would be done in a Standard specifying the stream cipher algorithm.