Announcing QRNG Open API Framework

Quantropi was proud to work with Palo Alto Networks on the QRNG Open API Framework that was announced on January 22, 2025.BackgroundRandom number generation (also known as entropy generation) plays a critical role in modern cybersecurity systems – the more “random” the number seed that is used for cryptographic key generation, the harder it is to compromise the key. Today’s security systems rely primarily on deterministic pseudorandom number generators (PRNGs) that algorithmically generate streams of seemingly random numbers starting from a small secret. Gaining knowledge of this secret would allow attackers to predict these random numbers and ultimately compromise the cryptographic key. For the most part, PRNGs have been “good enough” for decades. However, accelerating innovations in both artificial intelligence and quantum computing are leading to a new era of robust and sophisticated attacks on number generation and cryptographic keys. This puts standard classic cryptographic algorithms like RSA, ECC, and even AES-256 at risk, but it could impact the new NIST PQC standards even more because they require even larger blocks of entropy to produce longer and more complex cryptographic keys.Quantum Random Number GenerationIn contrast to PRNGs, quantum random number generators (QRNGs) use natural physical phenomena, such as electron tunneling, which are not algorithmic and therefore highly unpredictable. Because of this, random numbers from QRNGs cannot be compromised by the emergence of new technologies such as quantum computing and AI. QRNGs usually exist as a custom hardware component that is added to a server or pc or, in some cases, as a computing chip that can be built into a system.Multiple hardware vendors now offer commercial QRNG solutions, however the vendors use proprietary APIs specific to their solutions and system targets. This presents customers with a challenge in QRNG selection and integration, which can be both time-consuming and complex. Proprietary APIs also present a barrier for switching from one QRNG solution to another.Palo Alto Networks led an industry consortium including Quantropi to develop a common QRNG API framework to address these challenges. By providing an easy-to-implement common QRNG API, customers can accelerate their adoption of QRNG systems and enjoy seamless interoperability between QRNG vendors.Even with an open QRNG API, there are still many different vendor solutions to choose from. Two major types of QRNG solutions exist: streaming services and local hardware installations. Streaming services generate QRNG in the cloud and send it over network infrastructure to the destination endpoint. Local hardware installations involve procuring a vendor’s QRNG hardware device and then installing and configuring it on a server or PC inside your network.Quantropi developed our QiSpace™ Quantum Entropy as a Service (QEaaS) platform to provide customers with the best of both worlds – the security, performance, and convenience of a local hardware solution delivered in a turnkey, highly scalable and resilient cloud service that is compatible with the QRNG Open API Framework. Unique advantages of QiSpace QEaaS include:The imperative to harden cryptographic keys and mitigate new attack vectors has never been more important. Weak entropy produces weak keys whereas QRNG maximizes key strength, especially for the new NIST PQC standards. The QRNG Open API Framework is a great step forward that will give customers more freedom to quickly adopt QRNG solutions and harden their cryptographic infrastructure. We are excited to offer our streaming QiSpace QEaaS solution that provides all the performance, scale, reliability, and ease of deployment of a cloud solution with best-in-class security and sovereignty for customer control.Quantum-secure any application, product, network, or device with the QiSpace™ platform — without having to sacrifice performance or make major investments in new technology or infrastructure. See for yourself how only QiSpace™ offers TrUE quantum security via all three essential cryptographic functions. Leverage asymmetric encryption algorithms (the “Trust” or “Tr” of “TrUE”) via MASQ™, symmetric encryption (“U” for “Uncertainty”) via QEEP™ and strong random numbers (“E” for “Entropy”) via SEQUR™. Make it TrUE with QiSpace™ — and protect your business, brand, and customer promise. Now and forever. To learn more about our quantum-secure solutions, don’t hesitate to get in touch with our experts!