CEA-Leti Launches OpenTRNG, an Open-Source Project For True Random Number Generators Using Ring-Oscillator-Based Architectures

Cybersecurity Framework Offers Companies and Academia Tools For Building and Integrating TRNGs into Products or for a Teaching Platform

Grenoble, France – Oct. 15, 2024 – CEA-Leti today announced an open-source project to produce physical True Random Number Generators (TRNG) using ring-oscillator-based architectures. Targeting industry and academic researchers, the comprehensive toolkit includes reference designs, emulation tools and analytical tools to facilitate development and characterization of hardware TRNG implementations.

TRNGs play a pivotal role in domains such as cybersecurity and cryptography, where they are used to generate unpredictable random numbers such as cryptographic keys that ensure confidentiality and integrity of corporate, institutional and citizen private data against potential hackers.

OpenTRNG, the open-source initiative, was announced at the October International Conference on Design, Test and Technology of Integrated Systems (IEEE DTTIS) in the paper, “OpenTRNG: an Open-Source Initiative for Ring-Oscillator-Based TRNGs”.

Ensuring Integrity of Sensitive Data and Communication

“TRNGs are fundamental for generating random cryptographic keys used in encryption algorithms, digital signatures and secure communication protocols, ensuring the integrity, confidentiality, and authenticity of sensitive data and communications,” the paper explained. “Random numbers are also essential in scientific research, simulations, data analysis, gaming and various applications.”

The project’s launch is timely because EU state organizations are preparing to release new recommendations or requirements for TRNG security certification. For large companies, SMEs, and startups, OpenTRNG will support developing robust TRNGs compatible with the certification methodology. For the academic hardware-security community, the project could be used as a framework to enhance research efforts and provide a teaching platform for students.

“OpenTRNG should be seen as a framework that provides either tools helping developers build and integrate a TRNG into a product, or tools helping researchers test new TRNG structures or approach new physical random-noise sources,” said Florian Pebay-Peyroula, a CEA-Leti researcher and lead author of the paper.

Open Standards Can Be Validated

“In the field of security, there are two main approaches: proprietary solutions and open standards. While it may seem counterintuitive, open standards are the better option,” he said. “Unlike closed solutions, open designs can be reviewed and validated by international experts. By offering open-source TRNG designs and tools, we believe the project will make the field more accessible and help the community to grow.”

CEA-Leti said it created the framework as part of its commitment to help its industrial partners improve their competitiveness and is now making it widely available to industry and academia. This initiative is supported by the French Directorate General of Armaments (DGA) (Direction générale de l'armement). The institute welcomes additional external contributors and is open to including their names in the initiative.

See also https://github.com/opentrng/ptrng

About CEA-Leti (France)

CEA-Leti, a technology research institute at CEA, is a global leader in miniaturization technologies enabling smart, energy-efficient and secure solutions for industry. Founded in 1967, CEA-Leti pioneers micro-& nanotechnologies, tailoring differentiating applicative solutions for global companies, SMEs and startups. CEA-Leti tackles critical challenges in healthcare, energy and digital migration. From sensors to data processing and computing solutions, CEA-Leti’s multidisciplinary teams deliver solid expertise, leveraging world-class pre-industrialization facilities. With a staff of more than 2,000 talents, a portfolio of 3,200 patents, 11,000 sq. meters of cleanroom space and a clear IP policy, the institute is based in Grenoble, France, and has offices in Silicon Valley, Brussels and Tokyo. CEA-Leti has launched 76 startups and is a member of the Carnot Institutes network. Follow us on www.leti-cea.com and @CEA_Leti.

Technological expertise

CEA has a key role in transferring scientific knowledge and innovation from research to industry. This high-level technological research is carried out in particular in electronic and integrated systems, from microscale to nanoscale. It has a wide range of industrial applications in the fields of transport, health, safety and telecommunications, contributing to the creation of high-quality and competitive products.

For more information: www.cea.fr/english