公开(公告)号：US09449197B2

公开(公告)日：2016-09-20

申请号：US13916655

申请日：2013-06-13

申请人： GLOBALFOUNDRIES Inc.

发明人： Matthew John Green ,  Leigh Stuart McLean ,  Peter Theodore Waltenberg

IPC分类号： G06F21/72 ,  G06F7/58

CPC分类号： G06F21/72 ,  G06F7/588 ,  G06F21/73

摘要： A mobile device operating system pools any available entropy. The resulting entropy pool is stored in device memory. When storing entropy in memory, preferably memory addresses are randomly allocated to prevent an attacker from capturing entropy that might have already been used to create a random number. The stored entropy pool provides a readily-available entropy source for any entropy required by the operating system or device applications. Then, when a cryptographic application requests a true random number, the operating system checks to determine whether the pool has available entropy and, if so, a portion of the entropy is provided to enable generation (e.g., by a TRNG) of a true random number that, in turn, may then be used for some cryptographic operation. After providing the entropy, the operating system clears the address locations that were used to provide it so that another entity cannot re-use the entropy.

摘要翻译： 移动设备操作系统将任何可用的熵加载。 所产生的熵池存储在设备存储器中。 当在存储器中存储熵时，优选地随机分配存储器地址以防止攻击者捕获可能已经用于创建随机数的熵。 存储的熵池为操作系统或设备应用所需的任何熵提供了一种易于获得的熵源。 然后，当密码应用程序请求真正的随机数时，操作系统检查以确定池是否具有可用的熵，并且如果是，则提供熵的一部分以使得能够生成（例如通过TRNG）真实随机数 然后可以将其用于一些加密操作。 在提供熵后，操作系统清除用于提供它的地址位置，以便另一个实体不能重新使用熵。