{"id":3598,"date":"2019-10-15T16:10:00","date_gmt":"2019-10-15T14:10:00","guid":{"rendered":"https:\/\/webdev.atsec.us\/?p=3598"},"modified":"2024-07-26T16:14:53","modified_gmt":"2024-07-26T14:14:53","slug":"stephan-mueller-publishes-sp800-90b-compliant-linux-implementation-of-cpu-jitter-rng","status":"publish","type":"post","link":"https:\/\/webdev.atsec.us\/stephan-mueller-publishes-sp800-90b-compliant-linux-implementation-of-cpu-jitter-rng\/","title":{"rendered":"Stephan Mueller publishes SP800-90B compliant Linux implementation of CPU Jitter RNG"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"394\" height=\"432\" src=\"https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/Linux-jitter.png\" alt=\"\" class=\"wp-image-3599\" srcset=\"https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/Linux-jitter.png 394w, https:\/\/webdev.atsec.us\/wp-content\/uploads\/2024\/07\/Linux-jitter-274x300.png 274w\" sizes=\"(max-width: 394px) 100vw, 394px\" \/><\/figure>\n\n\n\n<p>NIST\u2019s Special Publication 800-90B \u201cRecommendation for the Entropy Sources Used for Random Bit Generation\u201d (SP800-90B) lays out the testing requirements for random bit generators. According to Implementation Guidance 7.18, compliance to SP800-90B will be mandatory for FIPS 140-2 validations starting November 8th 2020.<br><br>Our colleague Stephan Mueller recently published an updated, SP800-90B compliant version of his Jitter RNG suite for Linux to give our customers a head-start to achieve compliance before the transition date. While the SP800-90B compliance of the Jitter RNG was reviewed by NIST, official approval is only given when the Jitter RNG is used as part of an actual FIPS 140-2 validation.<br><br>In his documentation (Section 7.4) he explains the steps a user has to follow to claim SP800-90B compliance using the Jitter RNG, thus removing the need for them to prepare their own SP800-90B analysis.<br><br>Stephan Mueller made the Jitter RNG suite available for the public:<br><br>The code for the CPU Jitter RNG can be downloaded here:<br><a href=\"https:\/\/github.com\/smuellerDD\/jitterentropy-rngd\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">https:\/\/github.com\/smuellerDD\/jitterentropy-rngd<\/a><br><a href=\"https:\/\/github.com\/smuellerDD\/jitterentropy-library\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">https:\/\/github.com\/smuellerDD\/jitterentropy-library<\/a><br><br>The documentation can be downloaded here:<br><a href=\"http:\/\/www.chronox.de\/jent\/CPU-Jitter-NPTRNG.pdf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" title=\"\">http:\/\/www.chronox.de\/jent\/CPU-Jitter-NPTRNG.pdf<\/a><br><br>The associated tests can be downloaded here:<br><a href=\"http:\/\/www.chronox.de\/jent\/index.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" title=\"\">http:\/\/www.chronox.de\/jent\/index.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>NIST\u2019s Special Publication 800-90B \u201cRecommendation for the Entropy Sources Used for Random Bit Generation\u201d (SP800-90B) lays out the testing requirements for random bit generators. According to Implementation Guidance 7.18, compliance to SP800-90B will be mandatory for FIPS 140-2 validations starting November 8th 2020. Our colleague Stephan Mueller recently published an updated, SP800-90B compliant version of [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":3599,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[7,9,12],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts\/3598"}],"collection":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/comments?post=3598"}],"version-history":[{"count":1,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts\/3598\/revisions"}],"predecessor-version":[{"id":3600,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/posts\/3598\/revisions\/3600"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/media\/3599"}],"wp:attachment":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/media?parent=3598"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/categories?post=3598"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/tags?post=3598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}