Free Local SP 800-90B Entropy Assessment Kit
Run entropy-source assessments locally using the NIST SP 800-90B EntropyAssessment tooling. Your raw entropy data never needs to leave your computer.
Free · Docker required · Windows, macOS and Linux · Not a NIST product, validation, or endorsement.
Your entropy data stays local. QRNG.io does not need to receive your entropy dataset to use this toolkit. The browser talks only to a loopback service on your own computer, and there is no dataset upload anywhere on this website.
What the kit gives you
Runs locally
The assessment service runs in a container on your own computer, bound to 127.0.0.1.
Datasets stay with you
Raw entropy samples are read by the local service only. QRNG.io never receives them.
NIST EntropyAssessment tooling
The Docker build fetches and compiles the pinned official NIST SP 800-90B source.
Non-IID assessment
Conservative min-entropy estimation for raw sequential samples — the recommended starting point.
IID assessment
Statistical IID track for advanced use. It does not, by itself, establish an IID claim.
Restart assessment
Restart workflow on the SP 800-90B row-dataset layout with an existing initial entropy value.
Conditioning assessment
Parameter-driven conditioning estimate for vetted and non-vetted components. No dataset needed.
Local browser GUI
A polished interface at http://127.0.0.1:8787 instead of raw command-line invocations.
Docker-based setup
One start script for macOS/Linux or Windows. Docker Desktop or Engine is the only prerequisite.
Downloadable reports
Export assessment results as JSON or text, including the official NIST command output.
How it works
Four steps, all on your own machine. The entropy dataset is never uploaded to QRNG.io.
- 01
Download the kit
Get the ZIP from this page. It contains the Docker setup, the local app and the documentation.
- 02
Start the local Docker app
Run start_mac_linux.sh or start_windows.bat. The first build downloads the pinned NIST source and build dependencies.
- 03
Open the local interface
Visit http://127.0.0.1:8787 in your browser. The service is published on loopback, not on your network.
- 04
Run assessments on your datasets
Select a workflow, load your raw samples from disk, run the assessment and export the report — all on your machine.
The local interface
Everything below happens inside the app running on your computer at 127.0.0.1:8787.
- Drag-and-drop dataset loading from your own disk
- Assessment selection (non-IID, IID, restart, conditioning)
- Bits-per-symbol and input representation configuration
- Live assessment status while the NIST tool runs
- Min-entropy results
- Estimator outputs
- Dataset SHA-256 for report reproducibility
- Downloadable JSON / text report
- Official NIST command output, rendered as plain text
Download the kit
The ZIP contains the Docker configuration, the local application, the NIST integration, the data-format guide and the licensing and third-party notices — unchanged, exactly as published by iQrypto.
- Non-IID, IID, restart and conditioning workflows
- Local browser GUI and loopback-only local API
- Raw-data preparation guide and interpretation limits
- JSON / text report export
Related reading: What is min-entropy?, NIST SP 800-90A vs 90B vs 90C and the guide how to test a random number generator.
Get the free kit
Two required fields. We never ask for your entropy data — there is no dataset upload on this website.
Docker is required. The first local build downloads the pinned official NIST source and build dependencies; assessments then run locally.
Disclaimer
This toolkit assists with preliminary engineering assessment using NIST SP 800-90B EntropyAssessment software. It does not constitute NIST, CMVP, NVLAP, FIPS 140-3, or accredited laboratory validation or certification. NIST does not endorse QRNG.io or iQrypto.
A statistical run does not, by itself, establish that an entropy source is suitable for a particular security application. Source modelling, health tests, restart behaviour, conditioning, operating conditions, documentation, implementation boundaries and the applicable validation programme still matter.