论文标题
内核应用程序的随机数
On Random Number Generation for Kernel Applications
论文作者
论文摘要
操作系统内核使用密码安全的伪和数字生成器来创建地址空间本地化随机化偏移，以保护内存地址到进程免于探索，并安全地存储用户的密码并创建加密密钥。本文提出了一个称为KCS-PRNG的CSPRNG，该CSPRNG产生了不可再生的bitstreams。提出的KCS-PRNG提出了一种有效的设计，其独特地配置了两个新的非标准和经过验证的椭圆曲线和时钟控制的线性反馈移位寄存器以及一种新的方法，以始终如一地生成非可复制的随机位，这些随机位的随机位次任意长度。生成的位流在统计学上与真正的随机比特斯流是没有区别的，并且可证明是安全的，有抵抗力的攻击，向后和前进的保密表现出，表现为指数性线性复杂性，较大的时期和巨大的关键空间。
An operating system kernel uses cryptographically secure pseudorandom number generator for creating address space localization randomization offsets to protect memory addresses to processes from exploration, storing users' password securely and creating cryptographic keys. The paper proposes a CSPRNG called KCS-PRNG which produces non-reproducible bitstreams. The proposed KCS-PRNG presents an efficient design uniquely configured with two new non-standard and verified elliptic curves and clock-controlled linear feedback shift registers and a novel method to consistently generate non-reproducible random bits of arbitrary lengths. The generated bit streams are statistically indistinguishable from true random bitstreams and provably secure, resilient to important attacks, exhibits backward and forward secrecy, exhibits exponential linear complexity, large period and huge key space.
