Standards & programs
What is NIST SP 800-90A/B/C?
NIST Special Publications on random bit generation. 800-90A defines DRBG (deterministic generators); 800-90B defines entropy sources; 800-90C composes them into an RBG. QNSI entropy chain is documented at /security/entropy with citations to each.
Decision context
Why NIST SP 800-90A/B/C matters
The SP 800-90 series separates deterministic random-bit generators, entropy-source assessment and complete random-bit-generator constructions. Post-quantum keys and signatures still depend on high-quality randomness; changing the public-key algorithm does not repair a weak or unmeasured entropy source.
How to evaluate NIST SP 800-90A/B/C
Trace physical or platform entropy, conditioning, DRBG instantiation, reseeding, health tests and failure handling. Request the applicable validation scope and operational environment. Measure entropy-source behaviour independently where possible, and reject dashboards that infer quality solely from successful API responses.
Standards & programs
Standards & programs evidence boundary
Standards define algorithms, testing methods, transition expectations, or regulatory obligations; they do not automatically certify a product or deployment. Confirm the exact publication, version, scope, implementation evidence, and accountable assessment route before describing a system as compliant or validated.
FAQ
Common questions
What is NIST SP 800-90A/B/C?
NIST Special Publications on random bit generation. 800-90A defines DRBG (deterministic generators); 800-90B defines entropy sources; 800-90C composes them into an RBG. QNSI entropy chain is documented at /security/entropy with citations to each.
Why does NIST SP 800-90A/B/C matter?
The SP 800-90 series separates deterministic random-bit generators, entropy-source assessment and complete random-bit-generator constructions. Post-quantum keys and signatures still depend on high-quality randomness; changing the public-key algorithm does not repair a weak or unmeasured entropy source.
How should NIST SP 800-90A/B/C be evaluated?
Trace physical or platform entropy, conditioning, DRBG instantiation, reseeding, health tests and failure handling. Request the applicable validation scope and operational environment. Measure entropy-source behaviour independently where possible, and reject dashboards that infer quality solely from successful API responses.
More