Security analysis of the ISO standard OFB-DRBG

Deterministic random bit generators (DRBGs) are essential tools in modern cryptography for generating secure and unpredictable random numbers. The ISO DRBG standards provide guidelines for designing and implementing DRBGs, including four algorithms: HASH-DRBG HASH - DRBG , HMAC-DRBG HMAC - DRBG , CTR-DRBG CTR - DRBG , and OFB-DRBG OFB - DRBG . While security analyses have been conducted for the former three algorithms, there is a lack of specific security analysis for the OFB OFB - DRBG DRBG algorithm. We prove its security in the robustness security framework that has been used to analyze CTR-DRBG CTR - DRBG by Hoang and Shen at Crypto 2020. More precisely, we prove that OFB OFB - DRBG DRBG provides O(min \ λ /3, n/2 \ ) O ( min λ 3 , n 2 ) -bit security, including ideal cipher queries, where λ λ and n denote the lower bound of min-entropy and the size of the underlying block cipher, respectively. The proof strategy is to transform the robustness game of OFB OFB - DRBG DRBG into an indistinguishability game and then apply the H-coefficient technique to upper bound the distinguishing advantage.