Skip to content
ExtendedSource checked

Fortuna PRNG

Fortuna PRNG addresses cryptographic random generation by collecting entropy pools and reseeding a generator conservatively.

Quick Facts

Compact metadata for implementation and discovery.

Category
Cryptography
Difficulty
Intermediate
Family
Cryptographic Randomness
Tier
Extended
Status
Verified
Review
Source Checked
Sources
1
Formulas
0
Relationships
2
Code example
Ready
Visualization
Ready

Overview

Fortuna PRNG is a cryptographic randomness method for cryptographic random generation. It works by collecting entropy pools and reseeding a generator conservatively.

Core Concepts

cryptographic random generationcryptographic randomnessrandom samplingcryptography

Quick facts

Complexity

Runtime and memory behavior at a glance.

Best

O(V + E)

Average

O((V + E) log V)

Worst

O(V^2 + E)

Space

O(V + E)

When to Use

  • Use Fortuna PRNG when solving cryptographic random generation and you want to benefit from collecting entropy pools and reseeding a generator conservatively.
  • Choose it when O((V + E) log V) average/worst-case time and O(V + E) memory match your workload profile.
  • Prefer it over HMAC-DRBG or CTR-DRBG when the problem structure favors cryptographic random generation.

When Not to Use

  • Avoid custom production implementations unless they are independently reviewed.
  • Avoid when nonce, key, or randomness requirements cannot be satisfied.

What It Does

  • Computes cryptographic random generation within Cryptographic Randomness workloads (O((V + E) log V) time, O(V + E) space).
  • Works by collecting entropy pools and reseeding a generator conservatively.
  • Maintains key invariants across cryptographic random generation, cryptographic randomness, random sampling.

Use Cases

  • Production and research workloads requiring cryptographic random generation via collecting entropy pools and reseeding a generator conservatively.
  • Cryptographic Randomness pipelines where O((V + E) log V) time and O(V + E) space fit system constraints.
  • Engineering comparisons against HMAC-DRBG and CTR-DRBG when tuning cryptographic random generation.

Inputs

  • Message, key, modulus, seed, or public parameters
  • Security parameter or nonce when required

Outputs

  • Cryptographic value such as signature, random bits, proof, or modular result

Pseudocode

  1. 1.Initialize the input structures and parameters for Fortuna PRNG (cryptographic random generation).
  2. 2.Set up the working state for cryptographic random generation (cryptographic randomness).
  3. 3.Execute the core step by collecting entropy pools and reseeding a generator conservatively.
  4. 4.Update invariants and check termination or convergence criteria.
  5. 5.Return the resulting cryptographic random generation output.

Canonical Example

Input
Message, key, modulus, seed, or public parameters configured for a representative cryptographic random generation test case
Output
Cryptographic value such as signature, random bits, proof, or modular result satisfying Fortuna PRNG invariants
Explanation
Fortuna PRNG processes the input by collecting entropy pools and reseeding a generator conservatively, tracking cryptographic random generation and cryptographic randomness to produce the verified cryptographic random generation result.

Implementation Notes

  • Use vetted libraries for production implementations.
  • Keep randomness, nonce, and key-lifetime requirements explicit.
  • Validate modulus sizes, input ranges, and any randomness requirements before relying on production results.

Common Pitfalls

  • Using the primitive directly without the required protocol context.
  • Reusing nonces, seeds, or one-time values.
  • Ignoring parameter bounds, arithmetic preconditions, or randomness assumptions can make results unreliable.

Interactive Mechanism Walkthrough

Graph Frontier & Edge Relaxation

Show collecting entropy pools and reseeding a generator conservatively on a small cryptographic random generation example.

Fortuna PRNG mechanism walkthrough step 1 of 5suvwxt
Step 1 of 5: Initialize the input structures and parameters for Fortuna PRNG (cryptographic random generation).
cryptography-mechanism

Notes

Fortuna PRNG operates in O((V + E) log V) time and O(V + E) space within the Cryptographic Randomness family. Often compared with HMAC-DRBG and CTR-DRBG.

Sources (1)

What each reference supports for this entry.

Cryptography Engineering

Book

Cryptography reference for Fortuna PRNG entropy pools, reseeding strategy, and generator construction.

Explore Next

Good next jumps from the relationship graph, ranked for useful discovery.

Alternative toHMAC-DRBG

Fortuna uses entropy pools and reseeding policy, unlike the NIST HMAC-DRBG construction.

Alternative toCTR-DRBG

Fortuna and CTR-DRBG are cryptographic PRNG designs with different entropy management assumptions.

Tags

CryptographyRandomnessGraph