Joshua Hill

— On the schedule —

Integrating Multiple Randomness Sources in an SP 800-90C RBGC Framework

Modern operating environments commonly contain several sources for randomness, each of which may support distinct notions of security and have different validation statuses. In such instances, it is generally useful to securely combine the available sources of randomness. We propose using a suitably seeded SP 800-90C RBG2/RBG3(RS) as an "Initial Randomness Source" for an RBGC construction. This design supports both conservative (RBG3-like) and performant (RBG2) behaviors, both of which can degrade gracefully on failures if sufficient entropy sources are available.