You're Doing IoT RNG Wrong (Live)
Dan Petro and Allan Cecil present their live research on broken hardware Random Number Generators across IoT chipsets, extracting static zero-keys.
Summary
The Critical Role of Randomness in Embedded Cryptography
Cryptographic operations on IoT microcontrollers—including key generation and session nonces—depend on hardware Random Number Generators for mathematical security.
Live Demonstration of Hardware RNG Failures
Dan Petro and Allan Cecil demonstrate how flawed driver integration and uninitialized silicon registers cause IoT devices to generate predictable, static zero-value encryption keys.
Auditing Hardware Silicon and Firmware Stacks
The authors review entropy harvesting routines across major microcontroller vendors, highlighting architectural shortcuts that compromise randomness.
Verified Implementation Guidelines for Hardware Engineers
Petro and Cecil outline verified methodologies for combining analog hardware noise with cryptographically secure PRNGs.
Related talks
IoT Village·40 min
Dan Petro · Allan Cecil
Dan Petro and Allan Cecil uncover systemic flaws in hardware Random Number Generators across IoT chipsets, leading to static zero-value encryption keys.
Main Stage·40 min
Dan Petro
Dan Petro evaluates hardware Random Number Generators (RNGs) across popular IoT microcontrollers, exposing broken entropy sources that compromise crypto keys.
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.