Every cryptographic key, certificate, and secure transaction starts with the same requirement: randomness. But randomness that cannot be verified is randomness that cannot be trusted. This is the problem that the RNG classification system — and the principle of Locally Verified Entropy (LOVE™) — exists to solve. Not all random number generators are equal. Understanding the difference is the first step toward a cryptographic foundation that doesn’t ask you to assume anything.
Recognizing the significance of this topic, Quside and Deloitte have collaborated to shed light on the evolving landscape of random number generation. In our joint article, “Quantum Random Number Generators—What’s All the Fuss About?” we delve into how quantum technology advancements enhance cybersecurity. This partnership combines Deloitte’s expertise in cyber readiness with Quside’s pioneering work in quantum random number generation to provide comprehensive insights into RNG types, their classifications, and their impact on security.
On this page, we expand upon our collaboration with Deloitte to offer an in-depth exploration of RNG levels—from the illusion of randomness at Level 1 to the quantified uncertainty of Level 4. We’ll discuss why Level 4 RNGs, like those developed by Quside, represent the pinnacle of cryptographic security and how they are redefining standards in the industry. Whether you’re a cybersecurity professional, a tech enthusiast, or someone interested in the future of digital security, this guide will provide everything you need to know about RNGs from Level 1 to Level 4.

Entropy Sources
An entropy source is a mechanism that captures unpredictability from physical phenomena. These could be natural processes like thermal noise, atmospheric noise, or quantum mechanical events. The true randomness in these physical processes provides the raw material needed for secure cryptographic operations. Without a high-quality entropy source, any generated random numbers could be predictable, compromising the entire security system.
Deterministic Random Bit Generators (DRBGs)
A DRBG is an algorithm that expands the initial random input (the seed) from the entropy source into a larger sequence of bits that appear random. While DRBGs are essential for producing random-looking sequences efficiently, they do not create randomness on their own—they rely entirely on the unpredictability provided by the entropy source.
The Symbiotic Relationship
For an RNG to be secure and effective in cryptographic applications, it must combine a high-quality entropy source with a robust DRBG. The entropy source provides the true randomness, while the DRBG efficiently extends this randomness to meet the demands of modern applications. The security strength of the RNG hinges on the unpredictability of the entropy source; without it, even the best DRBG cannot compensate for poor randomness.

The Challenge of True Randomness
Random-looking sequences can be generated by algorithms, but without true unpredictability, they may be vulnerable to prediction or manipulation. This is particularly dangerous in cryptographic applications, where predictability can lead to security breaches.
Common Misconceptions
A widespread mistake is using statistical tests designed for DRBGs to assess the unpredictability of entropy sources. While these tests can indicate whether a sequence appears random, they do not measure the actual entropy or unpredictability. Relying solely on these tests can give a false sense of security.
Industry Standards and Guidelines
Recognizing this issue, organizations like the National Institute of Standards and Technology (NIST) have updated their guidelines to clarify the proper use of statistical tests. In April 2022, NIST emphasized that their statistical test suites should not be used to assess cryptographic random number generators for entropy quality.
The Importance of Proper Entropy Testing
Proper entropy testing involves analyzing the entropy source directly to ensure it produces unpredictable outputs. This often requires specialized methods and understanding of the physical processes involved. As global standards continue to evolve, collaborating towards unified approaches to entropy assessment is crucial for maintaining robust security.
This is precisely what LOVE™ addresses. Locally Verified Entropy sets a clear bar: entropy quality must be measured at the source, in real time, not inferred from statistical tests after the fact.

Not all random number generators are created equal. RNGs can be classified into four levels based on their source of randomness and the quality of entropy they provide. Understanding these levels is essential for selecting the right RNG for your security needs, from basic simulations to critical cryptographic applications.
To continue exploring the RNG types and their impact on cybersecurity, read our collaborative article with Deloitte: Quantum Random Number Generators—What’s All the Fuss About?. This insightful piece delves into the crucial role of randomness in cryptography, how quantum technologies enhance security, and the future of quantum random number generation. Read the full article on Deloitte Insights »
At the most basic level, Level 1 RNGs present an illusion of randomness without providing true unpredictability. These generators often produce outputs that appear random at first glance but are actually deterministic or repeating patterns.
Using non-random or poorly implemented RNGs in cryptography can lead to catastrophic security failures. A notable example is the 2010 security breach of the Sony PlayStation 3. Developers used the same random number repeatedly instead of generating a new one for each cryptographic operation. This oversight allowed attackers to reverse-engineer the private keys and compromise the system’s security.
Level 2 RNGs attempt to harness randomness from everyday processes that exhibit seemingly unpredictable behavior. These non-dedicated entropy sources include keyboard typing rhythms, mouse movements, disk drive timings, and variations in network traffic.
The idea behind Level 2 RNGs is to capitalize on the inherent randomness in human actions and complex system behaviors. Since these sources are readily available, they are often used in situations where dedicated entropy sources are not accessible.
Level 3 RNGs represent a significant advancement by employing dedicated entropy sources specifically designed for generating randomness. These include components like ring oscillators, avalanche diodes, and basic Quantum Random Number Generators (QRNGs).
Level 4 RNGs are where entropy stops being assumed and starts being proven. They generate randomness from dedicated physical sources — and critically, they verify the quality of that randomness locally, continuously, and in real time. This is what we call LOVE™: Locally Verified Entropy. Not a claim. A measurement.
Quside builds Level 4 Quantum Random Number Generators designed around a single principle: entropy must be verified at the source, not assumed. Our devices generate randomness from quantum optical processes — and measure its quality in real time, locally, on every deployment.
We decided to see what AI could do with Deloitte’s deep dive on RNGs, expecting maybe a summary or two. Instead, it produced a surprisingly enlightening podcast packed with great examples! Who knew AI could be such a natural storyteller?
If you’re interested in cybersecurity, quantum randomness, or just want to hear an AI’s take on complex topics, give it a listen. Sometimes the best insights come from the most unexpected places!


Combining PQShield’s PQSDK with Quside’s QRNGs delivers even wider options for developers to integrate quantum-safe cryptography into their applications easily. This integration is also nicely timed with the full release of the NIST PQC standards in August 2024

As businesses seek ever more sophisticated solutions for modern problems, Equinix is proud to support the growth, scale and democratisation of the quantum industry. Working with businesses such as Quside provides our customers in Spain and around the world with unique access to some of the most innovative security solutions on the planet for the on-going transition to quantum-safe cybersecurity and efficient randomized accelerated computation.

At Telefónica, we persistently evolve our understanding of the future to transform it into reality. These quantum-safe developments will enable Telefónica and its customers to benefit from enhanced security with easier deployment. End users will also gain from the assurance of uninterrupted services and protection against advanced cyber threats during the whole device’s lifetime.
Every cryptographic key your systems generate depends on entropy. Most organisations assume that entropy is fine. Level 4 changes that — because with LOVE, entropy is no longer invisible infrastructure. It is measured, observable, and verified at the source. That is what Quside builds. And it is available today. Join the organisations that verify their entropy.
Leverage true quantum randomness for the highest level of unpredictability.
Meet and exceed international security standards and guidelines.
Solutions designed to meet the demands of various applications and industries.
Optimized for deployment at scale, reducing overall security costs.
Compatible with existing hardware and software infrastructures.
Quside QRNGs provide locally, continuously, and observably verified entropy at the source.
Stay informed about the latest developments in quantum technology and cryptographic security.

A customer recently deployed a CV-QKD link to protect 2 high-security end points, using Quside’s FMC 400 to produce the basis choices in real-time.

Using Quside’s Randomness Acceleration Platform, our client was able to demonstrate up to 10x speed on the randomness consumption bottleneck for their Monte Carlo-based financial models.

Quside with its FMC400 architecture is part of a consortium developing the first European GEO-satellite QKD system for the distribution of unbreakable encryption keys over distances larger than 100 km with high availability.

A customer launched integrated Quside’s Quantum Entropy products to build and appliance that is supporting a novel cloud-based secutiry infrastructure.
PhD in quantum technologies at ICFO, where he developed the quantum randomness technologies that were transferred to Quside. 10 years of experience in quantum and photonics technologies, co-inventor of multiple patent families and co-author of 15+ papers in top scientific journals. Received the award MIT Innovators Under 35 Europe.
There are two main types of RNGs: Pseudorandom Number Generators (PRNGs) and True Random Number Generators (TRNGs). PRNGs rely on deterministic algorithms to generate numbers that appear random but can be predictable if the algorithm is known. TRNGs, on the other hand, generate randomness based on unpredictable physical processes, such as quantum phenomena, making them ideal for high-security applications.
QRNGs are a subset of TRNG devices that use quantum mechanical properties to generate random numbers. Quantum phenomena are naturally unpredictable, guaranteeing that the numbers produced are genuinely random, free from any biases or predictable patterns.
RNGs are classified into four levels based on the quality and unpredictability of the randomness they provide:
Level 3 RNGs use dedicated hardware to generate randomness but cannot continuously verify entropy quality in real-time. This means that, while randomness is generated, it might not consistently maintain the highest security standards. Level 4 RNGs, however, use quantum phenomena to create numbers and offer real-time verification to ensure the randomness always remains genuinely unpredictable and secure.
Level 4 RNGs represent the pinnacle of random number generation technology. They employ measurable entropy sources that are not only purposefully designed but also provably quantifiable and continuously verifiable during operation.
Unlike lower levels, which rely on deterministic or physical processes that can sometimes be predictable, Level 4 RNGs generate random numbers based on quantum processes that are inherently unpredictable. Moreover, it continuously verifies the quality of the randomness, ensuring consistent security.
Real-time verification of entropy in Level 4 RNGs ensures that the generated random numbers remain completely random over time. If there is any drop in entropy quality, the system can immediately detect and correct it, which is critical for maintaining security in high-stakes applications.
Level 4 RNGs prevent entropy starvation by continuously generating quantifiable high-quality entropy. This ensures sufficient randomness is always available to maintain cryptographic security, a common issue in lower-level systems.
Level 4 RNGs are ideal for high-security data centers, financial systems, government communications, and space missions. These applications require not just genuine randomness but also the ability to verify and guarantee that randomness in real-time.
Lower-level generators may produce random but predictable numbers, exposing systems to cyberattacks. Level 4 significantly reduces these risks with its truly unpredictable randomness and continuous verification.
Level 4 RNGs provide true randomness with real-time verification, ensuring the numbers are genuinely unpredictable and continuously monitored for quality. Lower-level RNGs (Levels 1 to 3) may generate random numbers. Still, they either rely on deterministic algorithms (Level 1), non-dedicated sources (Level 2), or dedicated hardware without verification (Level 3), including some QRNGs, making them less secure and more vulnerable to attacks.
In Level 4 RNG systems, randomness is generated by leveraging physical and/or quantum phenomena, such as phase diffusion or polarization switching. These phenomena are entirely unpredictable, ensuring true randomness.
Yes, Level 4 RNGs are already used in sectors such as space, data centers, and government applications. Their ability to provide genuine, verifiable randomness makes them a leading solution for securing critical infrastructures. Quside’s Level 4 RNGs are available in different form factors (chip, embedded, pcie…).
If the quality of randomness decreases, Level 4 RNG systems detect the anomaly immediately through their real-time verification capabilities. This allows the system to adjust or correct the random number generation process to maintain security and produce new high-quality entropy