Pseudorandomness

A pseudorandom sequence of numbers is one that appears to be statistically random, despite having been produced by a completely deterministic and repeatable process. ^[1] Simply put, the problem is that many of the sources of randomness available to humans (such as rolling dice) rely on physical processes not readily available to computer programs.

Background

The generation of random numbers has many uses, such as for random sampling, Monte Carlo methods, board games, or gambling. In physics, however, most processes, such as gravitational acceleration, are deterministic, meaning that they always produce the same outcome from the same starting point. Some notable exceptions are radioactive decay and quantum measurement, which are both modeled as being truly random processes in the underlying physics. Since these processes are not practical sources of random numbers, pseudorandom numbers are used, which ideally have the unpredictability of a truly random sequence, despite being generated by a deterministic process. ^[2]

In many applications, the deterministic process is a computer algorithm called a pseudorandom number generator, which must first be provided with a number called a random seed. Since the same seed will yield the same sequence every time, it is important that the seed be well chosen and kept hidden, especially in security applications, where the pattern's unpredictability is a critical feature. ^[3]

In some cases where it is important for the sequence to be demonstrably unpredictable, physical sources of random numbers have been used, such as radioactive decay, atmospheric electromagnetic noise harvested from a radio tuned between stations, or intermixed timings of keystrokes. ^{[1] [4]} The time investment needed to obtain these numbers leads to a compromise: using some of these physics readings as a seed for a pseudorandom number generator.

History

Before modern computing, researchers requiring random numbers would either generate them through various means (dice, cards, roulette wheels, ^[5] etc.) or use existing random number tables.

The first attempt to provide researchers with a ready supply of random digits was in 1927, when the Cambridge University Press published a table of 41,600 digits developed by L.H.C. Tippett. In 1947, the RAND Corporation generated numbers by the electronic simulation of a roulette wheel; ^[5] the results were eventually published in 1955 as A Million Random Digits with 100,000 Normal Deviates .

In computational complexity

In theoretical computer science, a distribution is pseudorandom against a class of adversaries if no adversary from the class can distinguish it from the uniform distribution with significant advantage. ^[6] This notion of pseudorandomness is studied in computational complexity theory and has applications to cryptography.

Formally, let S and T be finite sets and let F = {f: S → T} be a class of functions. A distribution D over S is ε-pseudorandom against F if for every f in F, the statistical distance between the distributions ${\displaystyle f(X)}$ and ${\displaystyle f(Y)}$, where ${\displaystyle X}$ is sampled from D and ${\displaystyle Y}$ is sampled from the uniform distribution on S, is at most ε.

In typical applications, the class F describes a model of computation with bounded resources and one is interested in designing distributions D with certain properties that are pseudorandom against F. The distribution D is often specified as the output of a pseudorandom generator. ^[7]

See also

• Cryptographically secure pseudorandom number generator  – Type of functions designed for being unsolvable by root-finding algorithms
• List of random number generators
• Pseudorandom binary sequence  – Seemingly random, difficult to predict bit stream created by a deterministic algorithm
• Pseudorandom ensemble
• Pseudorandom number generator  – Algorithm that generates an approximation of a random number sequence
• Low-discrepancy sequence  – Type of mathematical sequence
• Random number generation  – Producing a sequence that cannot be predicted better than by random chance
• Pseudorandom noise  – Pseudo-random signal with characteristics similar to noise

Further reading

• Donald E. Knuth (1997) The Art of Computer Programming, Volume 2: Seminumerical Algorithms (3rd edition). Addison-Wesley Professional, ISBN   0-201-89684-2
• Goldreich, Oded (2008). Computational Complexity: A Conceptual Perspective. Cambridge University Press. ISBN   978-0-521-88473-0. See especially Chapter 8: Pseudorandom generators, pp. 284–348, and Appendix C.2: Pseudorandomness, pp. 490–493.
• Vadhan, S. P. (2012). "Pseudorandomness". Foundations and Trends in Theoretical Computer Science. 7 (1–3): 1–336. doi:10.1561/0400000010.

External links

• HotBits: Genuine random numbers, generated by radioactive decay
• Using and Creating Cryptographic-Quality Random Numbers
• In RFC 4086, the use of pseudorandom number sequences in cryptography is discussed at length. ^[8]

References

1. George Johnson (June 12, 2001). "Connoisseurs of Chaos Offer A Valuable Product: Randomness". The New York Times .
2. S. P. Vadhan (2012). Pseudorandomness. pseudorandomness, the theory of efficiently generating objects that "look random" despite being constructed using little or no randomness
3. Mark Ward (August 9, 2015). "Web's random numbers are too weak, researchers warn". BBC.
4. Jonathan Knudson (January 1998). "Javatalk: Horseshoes, hand grenades and random numbers". Sun Server. pp. 16–17.
5. "A Million Random Digits". RAND Corporation. January 2001. Retrieved March 30, 2017.
6. Oded Goldreich. Computational Complexity: A Conceptual Perspective. Cambridge University Press. 2008.
7. "Pseudorandomness" (PDF).
8. D. Eastlake, 3rd; J. Schiller; S. Crocker (June 2005). Randomness Requirements for Security. doi: 10.17487/RFC4086 . BCP 106. RFC 4086.Best Common Practice. Obsoletes RFC  1750.