Billions of IoT Devices Affected by a Critical Random Number Generator Flaw

Billions of IoT Devices
Share It On:

10th August 2021, Kathmandu

There is a serious vulnerability in the hardware random number generators used in billions of Internet of Things (IoT) devices that do not generate random numbers correctly, compromising their security and putting them at risk of attack.

 “It turns out that when it comes to IoT devices, these ‘randomly’ selected numbers are not always as random as you would like,” said Bishop Fox researchers Dan Petro and Allan Cecil in an analysis published Say last week. “In fact, in many cases, the device chooses an encryption key of 0 or worse. This can lead to a catastrophic security breakdown from any upstream use.”

 Random Number Generation (RNG) is the key to supporting multiple encryption applications The process includes key generation, random number, and salting. In traditional operating systems, it is derived from a cryptographically secure pseudo-random number generator (CSPRNG) that uses entropy obtained from a high-quality seed source.

 As far as IoT devices are concerned, these are provided by a system-on-chip (SoC), which contains a dedicated hardware RNG peripheral called a true random number generator (TRNG) to capture the randomness of physical processes or phenomena.

 pointed out that the current method of invoking peripherals is incorrect. Researchers pointed out that the lack of comprehensive control over the response to the error code resulted in the random number generated not only being random, but worse, predictable.​​​ , Resulting in partial entropy, uninitialized memory, and even an encryption key containing a single zero.


Share It On:

Recent Posts

Ramesh Dhital Elected President of Pravasi Nepali Manch Canada

Ramesh Dhital Elected President of Pravasi Nepali Manch Canada

Share It On:18th November 2024, Kathmandu Ramesh Dhital has been unanimously elected President of the Pravasi Nepali Manch, Canada Chapter.

AI in Telecom: Nepal Telecom Debuts Service Robot ‘Maina’

AI in Telecom: Nepal Telecom Debuts Service Robot ‘Maina’

Share It On:17th November 2024, Kathmandu Nepal Telecom has taken a significant step forward in customer service innovation by launching

Lumbini Lions Jersey Unveiled: A Tribute to Buddhist Heritage

Lumbini Lions Jersey Unveiled: A Tribute to Buddhist Heritage

Share It On:17th November 2024, Kathmandu The Lumbini Lions Club has unveiled their jersey for the upcoming Nepal Premier League

Barbadian Fast Bowler Ramon Simmonds Joins Lumbini Lions for NPL 2024

Barbadian Fast Bowler Ramon Simmonds Joins Lumbini Lions for NPL

Share It On:17th November 2024, Kathmandu Lumbini Lions have added firepower to their bowling attack for the upcoming Nepal Premier

Xiaomi Unveils New High-Capacity Fast-Charging Power Banks in Nepal

Xiaomi Unveils New High-Capacity Fast-Charging Power Banks in Nepal

Share It On:17th November 2024, Kathmandu Xiaomi, a global leader in consumer electronics and smart manufacturing, has unveiled three new

.NET Conf 2024 AspnetCommunity Kathmandu Nepal Successfully Concludes With 130+ Attendees

.NET Conf 2024 AspnetCommunity Kathmandu Nepal Successfully Concludes With 130+

Share It On:17th November 2024, Kathmandu The ASP.NET Community has successfully hosted “.NET Conf 2024 AspnetCommunity Kathmandu Nepal” at Kantipur