Change list
- 26 Jul 2015 – added rework instructions for those who want to do it themselves
- 21 Jun 2015 – new software version to add optional (but default) whitening support between the OneRNG and rngd
- 20 Apr 2015 – new software version to support another issue with firmware verification – if your board was failing verification (starting up then the LED went out) you should grab this new version. If your board is working OK there’s no reason to upgrade.
- 19 Apr 2015 – new software version to support issues with python versions, and some gentoo udev issues – if your board was failing verification (starting up then the LED went out) you should grab this new version. If your board is working OK there’s no reason to upgrade.
- 10 Apr 2015 – new software version to support issues with rngd defaults and different rngd versions
- 26 Mar 2015 – new software versions to support new Version 3 firmware (and old V1 firmware)
- 16 Dec 2014 – added pointers to the programmer’s design files and firmware source
- 14 Dec 2014 – cleaned up for first major release, added links to github repositories and added top and bottom images
- 13 Nov 2014 – fixed issue disabling echo on tty devices
- 11 Nov 2014 – added at as a dependency, minor doc changes
- 5 Nov 2014 – added firmware validation, fixed multiple startup issues, support for buggy udevs
- 7 May 2014 – included .deb and .rpm files for Linux installation
- 29 Apr 2014 – added first part of Windows installation, added pics
- 22 Feb 2014 – Created
Contents
- Introduction
- Getting Started – Installation
- Security
- Theory of Operation
- Quality of random output
- Programming
- Purchase
- Licenses
- Downloads
- Links
- Credits
Introduction
Beta testers
Note to Linux beta testers if you got a beta unit prior to November 2014 your unit does not contain a signed firmware image – the software currently released on this page now checks the OneRNG’s firmware integrity before starting rngd – if your unit is working well there’s no real reason to update the software, if you’re having occasional reliability issues starting the unit then probably you should grab this new version of the support software, you can disable the firmware check by editing the configuration file /etc/onerng.conf
Goals
Simply:
- Cheap
- Reliable
- Open
- Hackable
Overview
Paranoia abounds! well maybe a bit – we are in a situation where we don’t trust our tools – especially our crypto tools – this project is an attempt to create a cheap open source entropy generator that’s open enough that one can verify and trust it.
We’ve based our design on an existing platform – our Cheap RF system – mostly because it’s cheap to build, we had existing hardware, and had just finished bringing up a USB stack for it
Our simple device is a USB stick, it is open source hardware, you can build your own, runs open source firmware – and you can physically open it to make sure that what’s inside is what you expect. With an external programmer you can also program it with your own firmware.
We generate ~350kbits per second of entropy packaged at ~7.8 bits/byte – if you use the entropy data at a lower it accumulates and we quickly approach 8 bits/byte.
For more detail: OneRNG Project Documentation
