Share this project

Done

Share this project

Done
OneRNG generates random numbers that your system can use for cryptography - it's completely open source, secure but hackable
OneRNG generates random numbers that your system can use for cryptography - it's completely open source, secure but hackable
OneRNG generates random numbers that your system can use for cryptography - it's completely open source, secure but hackable
440 backers pledged NZ$ 48,551 to help bring this project to life.

About this project

OneRNG - an open source entropy generator project video thumbnail
Replay with sound
Play with
sound

OneRNG - an open source entropy generator

NZ$ 48,551

440

After Edward Snowden's recent revelations about how compromised our internet security has become some people have worried about whether the hardware we're using is compromised - is it? We honestly don't know, but like a lot of people we're worried about our privacy and security.

What we do know is that the NSA has corrupted some of the random number generators in the OpenSSL software we all use to access the internet, and has paid some large crypto vendors millions of dollars to make their software less secure. Some people say that they also intercept hardware during shipping to install spyware. 

We believe it's time we took back ownership of the hardware we use day to day. This project is one small attempt to do that - OneRNG is an entropy generator, it makes long strings of random bits from two independent noise sources that can be used to seed your operating system's random number generator. This information is then used to create the secret keys you use when you access web sites, or use cryptography systems like SSH and PGP. 

Openness is important, we're open sourcing our hardware design and our firmware, our board is even designed with a removable RF noise shield (a 'tin foil hat') so that you can check to make sure that the circuits that are inside are exactly the same as the circuits we build and sell. In order to make sure that our boards cannot be compromised during shipping we make sure that the internal firmware load is signed and cannot be spoofed. 

The board cannot be reprogrammed over USB by errant software in your host computer. However we also believe that you don't truly own your hardware if you can't open it and tinker with it, more importantly you can't verify that what we promise is what you actually get if you can't do the same - so we offer the same programmer that we use to program it with, plus a cable as an added premium - we hope you'll hack away and make something even greater with what we've created.

Our boards are real, they have been in beta test for more than six months now, we have drivers for Linux, with Debian and Redhat installers, we've verified that the board works with Windows and Macs and we'll be introducing drivers for them as soon as possible.

Why should you buy one? - well openness is important, but if you're running servers that generate lots of SSL connections you need lots of entropy - your servers can slow down if you just depend on the entropy the kernel collects from its normal operations. OneRNG generates roughly 320kbits of entropy per second, if you need more than that you can connect multiple OneRNG devices to the same machine

If you are hosting virtual servers, your server will consume more entropy than usual. You can choose to use OneRNG to improve the host's random number pool (which is good for some systems), or you can use USB  passthrough to connect OneRNG hardware directly to the individual guest OSs. 

Sources of Randomness

We have two random sources - the first is an avalanche diode that generates 'quantum noise'. We sample this data in the analog domain which generates ~7 bits of entropy per byte. The second is an RF receiver that operates in and around the 2.4GHz wifi band - it runs a detuned receiver that frequency hops at random times to random channels and returns the least significant bit from the (failed) demodulator -this returns significantly closer to 8 bits per byte of entropy data.

You can easily request from one or both of the noise sources (some purists want just the raw bits) or you can use the built in "whitener" to smear the data together making it harder to predict and better suited for feeding into your kernel's random number generator.

Physical Security

The board is designed to be physically inspected - there's no traditional cover, instead we have a metal RF shield with a  removable lid. The metal can is there to stop in internal noise from escaping, but equally to make sure that the internal circuits cannot be interfered with by outside influences. The lid is so you can look inside and make sure the board contains the components you expect. You can also inspect the traces on the top and bottom of the printed circuit board to see if they match our published layout. 

Rewards

We're offering 3 levels of rewards. We plan on doing a small early production run of 400 on our own pick and place machine - these boards will be available as soon as possible after our Kickstarter closes, we're charging a premium for them because small runs cost more, we're also offering 50 of those along with a programmer for those who want to program their own devices. 

The basic reward is a OneRNG produced using more mass market production - probably in China - this will take longer but will cost less. There is also a bulk purchase option for those who want to 

Manufacturing

We're gearing up to manufacture - boards are being built in panels of 24 at a time:

24 Board Panel
24 Board Panel

We're going to build the first run of 400 boards on our own  manufacturing gear - we have a small pick and place machine along with gear for using solder stencils and two reflow ovens - we've already build a small run for our beta testers to test this work flow.

Pick and Place machine
Pick and Place machine

For volume manufacturing we plan on manufacturing in Shenzhen, China, we made one trip there in may to sound things out and will be dropping in again in late December.

We need to be able to be able to program and test many boards at once, the firmware we're loading into the boards takes a lot of time, this is largely because of the mechanism we're using to sign images and to make them verifiable, so we're building a programming and test fixture for use at our contract manufacturer that can program and test all 24 boards in a panel at once. We need to have this working before we pass off the boards to a Chinese manufacturer.

8 Board programmer/tester
8 Board programmer/tester

 We'll be using 3 programmer boards driving 4 6-unit bed-of-nails boards in a completed fixture and plan on testing this setup on the boards we build in house before we send it out for volume manufacturing.

Bed of nails boards
Bed of nails boards

Risks and challenges

We have working boards, currently being used by beta users, drivers exist for all major linux distros. The board works under Windows, and on Macs we're looking into providing system level support (kernel drivers are already in place) meanwhile the data is available to you with some simple programming.

We have a small pick and place machine and reflow oven, we already have solder stencils and printed circuit boards to build 400 units.

If we get a low volume we'll build all the boards using the same mechanism, if we get somewhere more than 500 orders at the lower price we'll build in China - either way will take longer.

We have received circuit boards to build a manufacturing test unit (programs and tests 24 boards at once) - we need to complete the programming for this before we can start manufacture - currently the software for this has been coded and debug is under way.

We've spent time in Shenzhen learning how to business there, but this is our first time doing this, we know how to move forward but don't plan to contact potential contract manufacturers until we know we're going to need them.

Learn about accountability on Kickstarter

Questions about this project? Check out the FAQ

Support this project

  1. Select this reward

    Pledge NZ$ 50 or more About $39

    A single OneRNG - built as part of a bulk manufacturing process - a longer term delivery

    Less
    Estimated delivery
    Ships to Anywhere in the world
    244 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  2. Select this reward

    Pledge NZ$ 50 or more About $39

    A single OneRNG for internal use in a server - built as part of a bulk manufacturing process - a longer term delivery (see updates #6-8 for more information)

    Less
    Estimated delivery
    Ships to Anywhere in the world
    6 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  3. Select this reward

    Pledge NZ$ 90 or more About $70

    A device programmer and cable suitable for programming your own code into a OneRNG

    Less
    Estimated delivery
    Ships to Anywhere in the world
    14 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  4. Select this reward

    Pledge NZ$ 110 or more About $86

    A single OneRNG - built as soon as possible after the kickstarter closes on our own in-house pick and place machine

    Less
    Estimated delivery
    Ships to Anywhere in the world
    Limited 34 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  5. Select this reward

    Pledge NZ$ 140 or more About $109

    A single OneRNG - built as part of a bulk manufacturing process - a longer term delivery

    A device programmer and cable suitable for programming your own code into a OneRNG

    Less
    Estimated delivery
    Ships to Anywhere in the world
    27 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  6. Select this reward

    Pledge NZ$ 140 or more About $109

    A single OneRNG for internal use in a server - built as part of a bulk manufacturing process - a longer term delivery (see updates #6-8 for more information)

    A device programmer and cable suitable for programming your own code into a OneRNG

    Less
    Estimated delivery
    Ships to Anywhere in the world
    1 backer
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  7. Select this reward

    Pledge NZ$ 190 or more About $148

    A single OneRNG - built as soon as possible after the kickstarter closes on our own in-house pick and place machine

    A device programmer and cable suitable for programming your own code into a OneRNG

    Less
    Estimated delivery
    Ships to Anywhere in the world
    Limited 42 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  8. Select this reward

    Pledge NZ$ 200 or more About $156

    You have a farm or a cloud - a pack of 5 OneRNG units - built as part of a bulk manufacturing process - a longer term delivery

    Less
    Estimated delivery
    Ships to Anywhere in the world
    26 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  9. Select this reward

    Pledge NZ$ 200 or more About $156

    You have a farm or a cloud - a pack of 5 OneRNG units - for internal use in a server - built as part of a bulk manufacturing process - a longer term delivery (see updates #6-8 for more information)

    Less
    Estimated delivery
    Ships to Anywhere in the world
    1 backer
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  10. Select this reward

    Pledge NZ$ 290 or more About $226

    You have a farm or a cloud - a pack of 5 OneRNG units - built as part of a bulk manufacturing process - a longer term delivery

    A device programmer and cable suitable for programming your own code into a OneRNG

    Less
    Estimated delivery
    Ships to Anywhere in the world
    22 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  11. Select this reward

    Pledge NZ$ 290 or more About $226

    You have a farm or a cloud - a pack of 5 OneRNG units - for internal use in a server - built as part of a bulk manufacturing process - a longer term delivery (see updates #6-8 for more information)

    A device programmer and cable suitable for programming your own code into a OneRNG

    Less
    Estimated delivery
    Ships to Anywhere in the world
    0 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  12. Select this reward

    Pledge NZ$ 400 or more About $311

    You have a farm or a cloud - a pack of 10 OneRNG units - built as part of a bulk manufacturing process - a longer term delivery

    Less
    Estimated delivery
    Ships to Anywhere in the world
    3 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.
  13. Select this reward

    Pledge NZ$ 400 or more About $311

    You have a farm or a cloud - a pack of 10 OneRNG units - for internal use in a server - built as part of a bulk manufacturing process - a longer term delivery (see updates #6-8 for more information)

    Less
    Estimated delivery
    Ships to Anywhere in the world
    0 backers
    NZ$
    Kickstarter is not a store.

    It's a way to bring creative projects to life.

    Learn more about accountability.

Funding period

- (45 days)