Explore

Randomness Standards Navigator

How the main NIST and ETSI randomness publications relate to each other — what each covers, what it does not establish, and where to read the primary source.

How they fit together

Entropy sourceSP 800-90BDRBG mechanismSP 800-90A Rev. 1RBG constructionSP 800-90C (draft)entropy flows left to right; each publication addresses a different layer

NIST SP 800-90B

NISTPublishedJanuary 2018

Covers

Design and testing of entropy sources: noise-source modelling, health testing, conditioning, and min-entropy estimation for IID and non-IID sources.

Does not establish

Approve, certify or endorse any product; guarantee security of a full RBG on its own; define the deterministic generator itself.

NIST SP 800-90A Rev. 1

NISTPublishedJune 2015

Covers

Deterministic random bit generators (DRBGs): Hash_DRBG, HMAC_DRBG and CTR_DRBG — instantiation, reseeding and generation once entropy has entered the construction.

Does not establish

Characterise or validate the entropy source feeding the DRBG; address physical noise sources or quantum processes.

NIST SP 800-90C

NISTDraftSeptember 2022 (3rd draft)

Covers

Construction of full random bit generators from entropy sources and DRBG mechanisms, including combinations of approved components.

Does not establish

Replace SP 800-90B entropy-source testing or SP 800-90A DRBG mechanisms; it sits on top of both. Status remains draft — check the current publication before relying on it.

NIST IR 8446

NISTInitial public draftSeptember 2025

Covers

Quantum random number generators — concepts, challenges and perspectives for quantum-based entropy sources.

Does not establish

Establish validation requirements, endorse specific QRNG products, or define conformance criteria.

ETSI TR 104 171

ETSITechnical reportJanuary 2025

Covers

Implementation guidance for quantum entropy sources used as components of random number generators.

Does not establish

Certify products or replace the applicable evaluation and validation processes; it is guidance, not a conformance scheme.

QRNG.io and iQrypto are not affiliated with NIST, BSI or ETSI, and nothing on this page implies endorsement by any standards body. Publication statuses reflect the sources reviewed on this page's last review — always confirm the current version at the primary source.