RESOURCE
Le rapport technique TR 104 171 de l'ETSI explique comment valider, surveiller et protéger les générateurs quantiques de nombres aléatoires sur tout leur cycle de vie, en prévenant qu'une sortie statistiquement aléatoire peut rester prévisible pour un attaquant disposant d'information auxiliaire.
Fabric Networks
Start with a conversation about your cryptographic posture.
On September 24, 2026 ETSI announced Technical Report TR 104 171, implementation guidance for quantum random number generators (QRNGs). Random numbers sit under every encryption key, so the quality of the entropy source matters as much as the algorithm that consumes it. ETSI's point is that a QRNG can pass statistical tests and still leak clues: an adversary with access to side information about the device can reduce its unpredictability.
The report covers the full lifecycle: modelling and validating the quantum entropy source, applying proper randomness extraction, monitoring entropy quality in operation to catch drift, bias and hardware failure, protecting the device against tampering and side channel attacks, and securing the path from the entropy source to the application that uses it. It introduces the idea of Entropy Zero Trust, in which no stage of the entropy pipeline is trusted without verification, and it proposes a common basis for comparing QRNG implementations by trust level, throughput, power, size, interfaces and scalability.
Quantum-safe keys are only as strong as the randomness behind them. If your key management or hardware security modules advertise quantum entropy, ask the supplier to show how the source is validated, monitored and attested, and put that evidence in your cryptographic bill of materials. Observed on the wire, not asserted on a data sheet. An inventory an auditor will accept includes the entropy source.