Random Number Generators

• Overview:
  The algorithms for generating approved random numbers are referenced in FIPS 140-2 Annex C.

• Testing Requirements:
  CMT labs can test for conformance to the following RNG algorithms that are referenced in FIPS 140-2 Annex C:
  • FIPS 186-2 with Change Notice 1 dated October 5, 2001 (Appendix 3.1 and 3.2)
  • ANSI X9.31 (Appendix A.2.4) - Using 2-Key Single DES
  • NIST-Recommended Random Number Generator based on ANSI X9.31 Appendix A.2.4 using the 3-Key Triple DES and AES algorithms
  • ANSI X9.62 (Appendix A.4).

    Copies of the ANSI X9.31 and ANSI X9.62 standards are available from X9, a standards committee accredited by the American National Standards Institute (ANSI). NIST does NOT have copies of these standards available for distribution.

The testing requirements for these algorithms can be found in the document titled The Random Number Generator Validation System (RNGVS).

• Validation List:
  NIST maintains the current RNG Validation List.

• Test Vectors:
  RNG Test Vectors - These files provide an electronic version of the test vectors that can be used to informally verify the correctness of an RNG algorithm implementation using the RNGVS. However, use of these vectors does not take the place of validation obtained through the Cryptographic Algorithm Validation Program (CAVP).
• RNG Test Vectors