1. Introduction

The term "random number generation" refers to the production of numbers (in a very broad sense) in such a manner that there is, ideally, no way in which the outcome of this production process can be predicted. Ever since the antiquity, random number generation has played an important role both in common everyday life activities, such as leisure games, as well as in the advancement of science. One of the oldest ways in which humans generated random numbers has been through the use of dice. It does not seem to be known when dice were invented, but they have been employed since ancient times, alongside with coin flipping, for predicting the future, decision-making, fortune-telling, gambling, dispute resolution, and leisure games. However, coin tosses are known to have a certain bias, which has been studied extensively^[1]. In addition, coins could someven rarely ltimes land on the edge, rendering the result useless^[2]. Modern usages of random numbers include Monte Carlo experiments, game decisions, and even Cryptography (see also Cryptographically-Secure Pseudorandom Number Generator).

Random Number Generators, which are usually machines, hardware, and/or software that automate the generation of random numbers, are often abare often abbreviated and referred to as RNGs. To this end, the ancient method of coin tossing to produce a, most usually, binary outcome, can essentially be viewed as a forerunner of modern binary RNGs, whereas dice throwing can be considered as a forerunner of high-entropy RNGs that allow for an even higher number of outcomes. It is also important to note here that in the context of random number generation, the term "number" does not exclusively refer to a mathematical number, but rather to the actual outcome of the hard (and, ideally, impossible) to predict process that is referred to as "random number generation", in the sense that a coin toss or a die throw would still be considered as random number generation, especially if the outcome of these processes was unbiased, even if the sides of the relevant coin(s) and di(c)e did not depict any numbers.

2. Desirable Properties of Random Number Generators

An RNG should have fourtwo desirable properties:

1. Uniformity: Each individual output must be equally probable. No biases towards any of the outcomes should exist.
2. Independence: The occurrence of one output must be independent of the occurrence of another outputs.
3. Long Period: If the RNG becomes deterministic after some time, the period should be as long as possible. Ideally, the period should be infinite, i.e., the RNG process should not be deterministic, and thus predictable, at any point in time.
4. Practicability: Numbers should be generated efficiently and the RNG should be supported on different architectures, systems and environments.

The coin toss mentioned above does not exactly fully exhibit fil these characteristics, but can still provide sufficiently random numbers for everyday use.

3. Types of Random Number Generators

The two main types of RNGs are called True RNGs (TRNGs) and Pseudo-RNGs (PRNGs). These two types of RNGs can, usually, only be distinguished through the study of a high amount of the numbers that they produce as outcomes.

3.1. True Random Number Generators

A TRNG is able to generate random numbers that can only be predicted (correctly) with negligible probability, even if the initial value and conditions are known. TRNGs are typically slower than PRNGs and may additionally be biased. For debiasing, most often von Neumann correction is deployed^[3]. It is worth mentioning that most quantum effects appear to be truly unpredictable and random, leading to TRNGs that are based on quantum mechanics.

3.2. Pseudorandom Number Generators

A PRNG can generate sequences of numbers that appear to be random, but are in fact completely predictable when the initial value (being referred to as the seed) and conditions used for the number generation process are known.

which PRNGfields are usuallyof cryptography?

The algorithms or simple mathematical formulae, making them faster than TRNGs at the cost of determinism.

On eory behind the generation of random numbers, as well as the ability to potentially more general note, the concepts of determinism and randomness are rather hard to fully define. In particular, most processes that appear to be random are rather dependent on the unpredictability of their initial conditions and predict the outcome of this process, has been heavily studied by mathematics, in an attempt to either ensure the randomness of the overall physical system. For example, the movement of a leaf in the wind should be fulprocess or gain an advantage in correctly predictable, if all the relevant parameters are known with extremely high detail, yet in practice, it is rather unpredictable in the general case. In the same fashion, the output of PRNGs may sometimes successfully pass even the most rigorous statisticing its future outcomes. In particular, probability theory is one of the main mathematical fields relevant to random number generation.

cryptographically secure random number generator

Ralndom tests, even though it is completely deterministic. For example, a coin toss and a die throw are also rather fully deterministic processes, at least in the general case, which, however, are most often considered as random. To this end, one should refer to chaos theory, and the way in which minor variations affect the overall time progression of a system in such a way that two or more entirely different outcomenumbers have also been employed in cryptography, exactly due to their properties. This fact, in conjunction with the ongoing digitalisation of our world, has, more recently, led to an interest in random number generation within the framework of computer science. In this context, random number generation systems are possible due to them. A similar example from the digital world would be a hash function that exhibits the avalanche effect: for slightly different inputs, it produces totally different outputs. If such a hash function is employed for the production of a sericlassified into two main categories: PseudoRandom Number Generators (PRNGs) and True Random Number Generators, with the former generating sequences of numbers, by feeding it its output to produce a new number, the outcome may appear as that appear to be random, especially if this function produces really long numbers, but it will always be fully deterministic and predictable.

Abut are in fact completely predictable when the initial value co(beincept somehow similar to that of a PRNG is thatg referred to as the ofseed) and Physical Unclonable Function, where miconor vardiations lead the system to reach a rather stable state, which appears as unpredictable, and thus "unclonable". In this case, every time the physical system is queried, the result is almost the same; thus, a PUF produces an output that can be considered as similar to that of a PRused for the number generation process are known, and with the latter generating truly random sequences of numbers that can only be predicted (correctly) with negligible probability, even if the initial value and conditions are known.

NG toise

Chat ios not biased towards a particular digit (a particular outcome that would occ, deterministic, yet rather "random"

Qur almost every time), but is extremely biased towards a particular sntum effects, truly random and unpredictable

Repertities on^[1]

Cofin digits (a series of outctossing leads to bits...

Randomes that occurs almost every time).

4. Generation Methods

This sNumber Genecration lists some commonly uSystems in Computer Science

Pseud and newly proposed RNGs.

4.1. TRNGs

• Radioactive decay: The fact that it is impossible to predict when an atom will decay can be used to generate random numbers^[4].
• Radio Frequency (RF) noise: FM broadcasting and other means of wireless communication are susceptible to noise, which can be extracted to obtain random numbers^[5].
• Thermal noise: Electronic components such as resistors emit thermal noise, which can be measured to extract random numbers^[6] (e.g., RdRand).
• Memory timings: The write and read latency of memories is usually prone to noise which can be extracted to generate random numbers^[7].
• Ring oscillators: Extracting the jitter of multiple free-running oscillators by comparing them can lead to random numbers^[8].

4.2. PRNGs

• Middle-Square method: To generate a new random number, the previous one is squared and the middle digits of the product form the next random number^[3].
• Congruential generators: The next random number is generated using a simple congruence relation^[9][10].
• Multiply-with-carry: Special case of a congruential generator and Lehmer generator^[11].
• Mersenne twister: Uses an algorithm to generate 624 random 32-bit numbers in a single iteration^[12].
• Blum-Blum-Shub generator: Uses quadratic residues in a semiprime quotient ring to generate the next random number^[13].
• Block ciphers (ANSI X9.17): Appendix C of the standard includes a random generator using a block cipher^[14].

5. Attacks

Most RNGs arorandom number ge prone to some kind of attack.ration, based on algorithms

True Attracks on PRNGs include, but are not limited ndom number Generato^[15]:rs

• Direct Cryptanalytic Attacks: An attacker can directly distinguish between the output of the PRNG and random numbers (cryptanalyze the PRNG).
• Input-based Attacks: An attacker is able to use knowledge and control of the PRNG inputs to cryptanalyze it.
• State Compromise Extension Attacks: The attacker can guess state information due to an earlier breach of security.

6. Modern Applications

• Random noise (e.g., Gaussian noise)
• Key generation (TLS, SSH)
• Salts for Hashes
• RSA prime factors
• Nonces (TLS)
• Initialization Vectors (AES/Rijndael)