Section 7.5. Recommended Reading and Web Sites | Cryptography and Network Security (4th Edition)

[Page 227 (continued)]

7.5. Recommended Reading and Web Sites

[FUMY93] is a good survey of key management principles.

Perhaps the best treatment of PRNGs is found in [KNUT98]. An alternative to the standard linear congruential algorithm, known as the linear recurrence algorithm, is explained in some detail in [BRIG79]. [ZENG91] assesses various PRNG algorithms for use in generating variable-length keys for Vernam types of ciphers.

An excellent survey of PRNGs, with an extensive bibliography, is [RITT91]. [MENE97] also provides a good discussions of secure PRNGs. Another good treatment, with an emphasis on practical implementation issues, is RFC 1750. This RFC also describes a number of deskewing techniques. [KELS98] is a good survey of secure PRNG techniques and cryptanalytic attacks on them.

BRIG79 Bright, H., and Enison, R. "Quasi-Random Number Sequences from Long-Period TLP Generator with Remarks on Application to Cryptography." Computing Surveys, December 1979.
FUMY93 Fumy, S., and Landrock, P. "Principles of Key Management." IEEE Journal on Selected Areas in Communications, June 1993.
KELS98 Kelsey, J.; Schneier, B.; and Hall, C. "Cryptanalytic Attacks on Pseudorandom Number Generators." Proceedings, Fast Software Encryption, 1998. http://www.schneier.com/paper-prngs.html
KNUT98 Knuth, D. The Art of Computer Programming, Volume 2: Seminumerical Algorithms. Reading, MA: Addison-Wesley, 1998.
MENE97 Menezes, A.; Oorshcot, P.; and Vanstone, S. Handbook of Applied Cryptography. Boca Raton, FL: CRC Press, 1997.
RITT91 Ritter, T. "The Efficient Generation of Cryptographic Confusion Sequences." Cryptologia, vol. 15 no. 2, 1991. http://www.ciphersbyritter.com/ARTS/CRNG2ART.HTM
ZENG91 Zeng. K.; Yang, C.; Wei, D.; and Rao, T. "Pseudorandom Bit Generators in Stream-Cipher Cryptography." Computer, February 1991.

Recommended Web Sites

NIST Random Number Generation Technical Working Group: Contains documents and tests developed by NIST that related to PRNGs for cryptographic applications. Also has useful set of links.

[Page 228]

LavaRnd: LavaRnd is an open source project that uses a chaotic source to generate truly random numbers. The site also has background information on random numbers in general.
A Million Random Digits: Compiled by the RAND Corporation.