Slashdot Mirror


Researchers Devise a Way To Generate Provably Random Numbers Using Quantum Mechanics (newatlas.com)

No random number generator you've ever used is truly, provably random. Until now, that is. Researchers have used an experiment developed to test quantum mechanics to generate demonstrably random numbers, which could come in handy for encryption. From a report: The method uses photons to generate a string of random ones and zeros, and leans on the laws of physics to prove that these strings are truly random, rather than merely posing as random. The researchers say their work could improve digital security and cryptography. The challenge for existing random number generators is not only creating truly random numbers, but proving that those numbers are random. "It's hard to guarantee that a given classical source is really unpredictable," says Peter Bierhorst, a mathematician at the National Institute of Standards and Technology (NIST), where this research took place. "Our quantum source and protocol is like a fail-safe. We're sure that no one can predict our numbers." For example, random number algorithms often rely on a source of data which may ultimately prove predictable, such as atmospheric noise. And however complex the algorithm, it's still applying consistent rules. Despite these potential imperfections, these methods are relied on in the day-to-day encryption of data. This team's method, however, makes use of the properties of quantum mechanics, or what Einstein described as "spooky action at a distance." Further reading: Wired, LiveScience, and CNET.

24 of 139 comments (clear)

  1. Random.Org to the Rescue! by Anonymous Coward · · Score: 2, Informative

    Mostly just for the random entertainment value: https://www.random.org/

  2. First post by Anonymous Coward · · Score: 2, Funny

    int getRandomNumber()
    {
        return 1; // chosen from random post number
    }

    1. Re:First post by darkain · · Score: 4, Informative

      Obligatory XKCD reference for those that didn't get it: https://xkcd.com/221/

    2. Re:First post by alvinrod · · Score: 3, Interesting

      In this case TFS seems to define provably random as that which cannot be predicted in advance given sufficient knowledge of how the number is generated and some initial conditions. Supposedly they have proven that this is the case, though I have not verified the correctness of their proof. However, this is really no different than other mathematical proofs. Either the proof is correct or it is not, but a lack of understanding of the proof does not change its correctness.

    3. Re:First post by Anonymous Coward · · Score: 5, Funny

      Obligatory Dilbert: http://dilbert.com/strip/2001-...

    4. Re:First post by TechyImmigrant · · Score: 2

      What is "provably random"?

      It is bullshit.

      Bullshit. If quantum physics is random, then macroscopic noise is random and there are entropy extraction algorithms are mathematically provable to have a random output in terms of min-entropy or computational predictions bounds, assuming they have a random input with a certain min-entropy.

      Can you really "prove" that a number is random?

      No. See above.

      Yes. See above.

      --
      I should use this sig to advertise my book ISBN-13 : 978-1501515132.
    5. Re:First post by ShanghaiBill · · Score: 2

      If quantum physics is random ...

      That is an assumption, not an axiom. As our understanding of physics improves, we may find deeper patterns.

      ... then macroscopic noise is random

      So what makes this new RNG different from other RNGs based on quantum phenomena, such as Brownian motion, or zener diode avalanches?

  3. Nice try "researchers" by CajunArson · · Score: 4, Funny

    You're not fooling me. It's well known that the NSA incorporated backdoors into the fabric of the universe when they subverted the big bang.

    --
    AntiFA: An abbreviation for Anti First Amendment.
  4. xkcd... by Kenja · · Score: 2

    int getRandom() {
    return 4; // generated by dice roll
    }

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
  5. Woo Quantum, must be better... by lurcher · · Score: 3, Interesting

    I would have thought thermal noise in a resistor or semiconductor (which is in itself generated by subatomic so quantum, events) would be just as random.

    1. Re:Woo Quantum, must be better... by Baloroth · · Score: 4, Interesting

      It is, and that's exactly how Intel's hardware-based random number generator in their CPUs works (so, yes, we have used a truly provably random source of RNGs... that is, if Intel is telling the truth about how it works). Another source of RNG is radioactive decay, though that's not terribly commonly used thanks to the hardware requirements. In this case, the article doesn't describe the source of randomess (aside from "correlations in superpositions", which could be anything from completely random to completely unrandom). It might not even be as random as they think it is (just being quantum is very much not enough), especially because they "improved their data" by only looking at sequences where the bits were almost perfectly uniformly 50/50 1 and 0, which is precisely not the right way to ensure good randomness: true random sequences usually don't obey uniformity, except in the limit as the length of the sequence goes to infinity, and requiring uniformity (or near-uniformity) in a "random" sequence reduces the entropy. That tells me they don't really understand randomness, which does not bode well for their claims.

      --
      "None can love freedom heartily, but good men; the rest love not freedom, but license." --John Milton
    2. Re:Woo Quantum, must be better... by TechyImmigrant · · Score: 2

      I would have thought thermal noise in a resistor or semiconductor (which is in itself generated by subatomic so quantum, events) would be just as random.

      Via the central limit theorem, the addition of multiple binary random events will combine into a gaussian distribution. It will be random, with the min-entropy determined by the distribution - H_inf(X) = -log_2(max(Pr(X_i)).

      So there will be some entropy loss. But that's fine. There's plenty of entropy about us to sample and turn into random bits.

      --
      I should use this sig to advertise my book ISBN-13 : 978-1501515132.
    3. Re:Woo Quantum, must be better... by TechyImmigrant · · Score: 3, Interesting

      >It is, and that's exactly how Intel's hardware-based random number generator in their CPUs works

      Indeed, it is. I happen to know this well because I'm one of the designers of it.

      Quantum proven randomness is proven by showing a violation of Bell's theorem, showing a correlation that exceeds whats could be achieved by unentangled particles and therefore showing that they were a part of a random quantum process.

      The form of every mathematical proof is of the form "If this is true, then [blah blah blah], so that it true".
      The form of this particular proof is "If the rules of quantum physics are true, then [blah blah blah] so 'the output is random' is true".

      --
      I should use this sig to advertise my book ISBN-13 : 978-1501515132.
  6. TRNGs are common... by MrKevvy · · Score: 5, Insightful

    It has already been established that thermal/shot component noise (most commonly from reversed diodes) is demonstrably statistically random and is based on quantum electrodynamic events.

    TRNGs (True Random Number Generators) using this principle have been around for a while embedded in some hardware such as the Intel 82802 firmware hub found on some Intel mainboards

    --
    -- Insert witty one-liner here. --
    1. Re:TRNGs are common... by Anonymous Coward · · Score: 3, Insightful

      Pseudo-profound bullshit. Nothing in that post is true. Classifying something does not change the thing being classified.

  7. Re:Raally? by jaymemaurice · · Score: 2

    Ted Stevens, is that you??

    --
    120 characters ought to be enough for anyone
  8. Lava lamps as entropy source by sinij · · Score: 2

    Nice, I can finally upgrade my lava lamp entropy source to a quantum source that uses laser light on a crystal. Why? Because /dev/urandom is for peasants.

  9. Re:I knew it by NicknameUnavailable · · Score: 3, Funny

    So we do have free will after all.

    Nope, the multiverse is most likely correct. The big bang never stopped, it just went interdimensional and time itself is an illusion caused by the patterns which emerge when tracing a path along one of all potential possibilities. The interference pattern and statistical interpretation of it is just the probability that a particle you observe on your worldline goes in a particular direction at a particular velocity, but all of those possibilities are traced out on different worldlines. There's a reality where you're a supervillan and a reality where you're the richest person in the world, and then there's most realities where you're neither - each of those realities are practically infinite and expanding forward and backward in time in their derivations, but the likelihood you perceive one of the abnormal ones is significantly reduced. You probably can't picture yourself as a serial killer or helping people to the point you are literally made into a saint, but both exist somewhere in the multiverse. All your choices are irrelevant because they all happen.

  10. Very Different from Maths Proof by Roger+W+Moore · · Score: 4, Insightful

    However, this is really no different than other mathematical proofs.

    No, it is very different from a mathematical proof. This proof relies on our understanding of quantum mechanics and photons. Mathematical proofs are far more fundamental in that they are true regardless of the properties of the universe you happen to be in at the time. That being said QM is one of the most accurately tested scientific laws there has ever been but, nevertheless, if an experiment tomorrow shows that it is wrong this "proof" might come crashing down.

    1. Re: Very Different from Maths Proof by javaman235 · · Score: 2

      Is this actually new? My understanding was that 'hidden variables' were ruled out, so randomness is required, as any theory that predicted outcomes would be tantamount to hidden variables. So we already have quantum randomness generators:
      https://qrng.anu.edu.au/

      --
      -The art of programming is the pursuit of absolute simplicity.
    2. Re:Very Different from Maths Proof by swillden · · Score: 3, Interesting

      Mathematical proofs are far more fundamental in that they are true regardless of the properties of the universe you happen to be in at the time.

      This is deeply wrong.

      Mathematical proofs are true if and only if the assumptions (axioms) on which they're based are true. When you apply mathematics to real things, you're making a critical unproven and unprovable assumption: That the mathematical structure maps perfectly onto the real-world structure. That this works quite well isn't surprising, because we work hard to craft mathematical structures that map as closely as we can, and because the universe appears to have consistent structure. That said, the fact that it has always worked well in no way proves that the mapping will always hold, and it says nothing about the "truth" of reality other than we observe that it consistently appears to behave according to a certain pattern.

      The map is not the terrain. And when you posit a universe with a different properties (different terrain!) then there is no reason to expect the map even to be useful.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  11. The Problem with this is.. by neoRUR · · Score: 2

    That you won't know its random till you look at it.

  12. What's the difference? by david_thornley · · Score: 2

    Wikipedia has a list of available hardware random number generators from $7 on up. The ones that use direct quantum randomness seem to start at about a thousand euros, the cheaper ones using forms of noise. There isn't any way to predict atmospheric noise, since we're talking about a chaotic system that deals with interactions small enough that the uncertainty principle isn't completely swamped.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  13. Re:I knew it by NicknameUnavailable · · Score: 2

    Difference between your description and reality is that the multiverse explanation removes all paradoxes from the quantum and relativistic worlds at all scales, while every other potential resolution fails to do so and usually create additional ones. That fact alone makes the multiverse interpretation the only plausible solution at this point in time.