ETSI Addresses Vulnerabilities in Quantum Random Number Generators

• •ETSI released guidelines addressing vulnerabilities in Quantum Random Number Generators.
• •The Entropy Zero Trust framework aims to mitigate side-channel attack risks.
• •Future specifications will focus on standardizing API command sets and integration with post-quantum cryptography.

The European Telecommunications Standards Institute (ETSI) Technical Committee Cyber Security has released ETSI TR 104 171, which identifies vulnerabilities in Quantum Random Number Generators (QRNGs). The report highlights that practical implementations can reintroduce predictability due to factors like detector dead times and thermal noise. It establishes guidelines for the entire QRNG lifecycle, including entropy source modeling and health monitoring. To combat side-channel attacks, ETSI introduces the Entropy Zero Trust framework, ensuring continuous verification at every stage. The report emphasizes the need for standardized API command sets and integration with post-quantum cryptography standards. Mark Pecen, chair of the committee, outlined future priorities for QRNG specifications. The guidelines aim to enhance the security of quantum communications and networks.