CEA-Leti launches open-source project

The initiative, designed for industry and academic researchers alike, provides a comprehensive toolkit that includes reference designs, emulation tools, and analytical resources to support the development and analysis of hardware-based TRNGs.

TRNGs are crucial in fields such as cybersecurity and cryptography, where they are used to generate unpredictable random numbers, such as cryptographic keys. These keys are essential for maintaining the confidentiality and integrity of sensitive data belonging to corporations, institutions, and individuals, protecting them from potential cyber threats.

Named 'OpenTRNG', the open-source initiative was unveiled at the October International Conference on Design, Test and Technology of Integrated Systems (IEEE DTTIS) in the paper, OpenTRNG: an Open-Source Initiative for Ring-Oscillator-Based TRNGs.

Ensuring secure data and communication

“TRNGs are fundamental for generating random cryptographic keys used in encryption algorithms, digital signatures and secure communication protocols, ensuring the integrity, confidentiality, and authenticity of sensitive data and communications,” the paper explained. “Random numbers are also essential in scientific research, simulations, data analysis, gaming and various applications.”

This project comes at a critical moment as EU state bodies are preparing new recommendations and requirements for TRNG security certification. For large enterprises, SMEs, and startups, OpenTRNG provides the tools to develop secure TRNGs compatible with certification standards. For academia, the initiative offers a valuable platform for research and teaching, advancing hardware security efforts.

“OpenTRNG should be seen as a framework that provides either tools helping developers build and integrate a TRNG into a product, or tools helping researchers test new TRNG structures or approach new physical random-noise sources,” said Florian Pebay-Peyroula, a CEA-Leti researcher and lead author of the paper.

The value of open standards

“In the field of security, there are two main approaches: proprietary solutions and open standards. While it may seem counterintuitive, open standards are the better option,” he said. “Unlike closed solutions, open designs can be reviewed and validated by international experts. By offering open-source TRNG designs and tools, we believe the project will make the field more accessible and help the community to grow.”

CEA-Leti developed this framework as part of its ongoing effort to help its industrial partners enhance their competitiveness. The institute is now making OpenTRNG widely available to both the industrial and academic sectors. Supported by the French Directorate General of Armaments (DGA), CEA-Leti is also welcoming contributions from external collaborators, offering them the opportunity to be recognised within the initiative.