I'm researching how my smart card's chipset generates random numbers. According to a source in forums the YubiKey NEO is based on the A700x chipset from NXP. The page for the chipset indicates that the chipset provides a:

Low-power True Random Number Generator (TRNG) in hardware, AIS-31 compliant

I've been trying to determine what the AIS-31 spec defines, but Google has been fairly unproductive. I can find other chipsets that are certified by the same standard, but what does the certification mean? How is testing done?

Once I know either a) how this TRNG is implemented or b) what the certification consists of and means, I'll then be able to determine how much trust I should place in this chip's random number generation.


BSI: Application Notes and Interpretation of the Scheme (AIS) 31 – Functionality Classes and Evaluation Methodology for Physical Random Number Generators, Version 1 (25.09.2001), English translation.

BSI's AIS site is here.

Standard is here.

  • sorry for link-only, the question is answered with a google search – schroeder May 11 '15 at 22:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.