Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Digest of technical papers/Digest of technical papers - IEEE International Solid-State Circuits Conference

16.3 A 16×16 pixels SPAD-based 128-Mb/s quantum random number generator with −74dB light rejection ratio and −6.7ppm/°C bias sensitivity on temperature

Nicola Massari, Leonardo Gasparini, Alessandro Tomasi, Alessio Meneghetti, Hesong Xu, Daniele Perenzoni, Guglielmo Morgari, David Stoppa

Published Jan 1, 2016• 24 citations
Publisher

Abstract

A robust true random number generator (TRNG), able to assure high quality output at different working conditions, is an attractive solution in secure communication application, because it increases resilience against possible external attacks. Among different TRNGs, quantum RNGs (QRNG) represent a good candidate for such systems, because of their compactness, low cost and performance [1–6]. They typically consist of a source of photons, such as an attenuated LED, coupled to a detector with single photon capability (SPAD). Many works in the literature have used a single detector [1–4] for random bit extraction. These devices are characterized by a limited bit rate [1], which can be increased by exploiting the arrival time of photons at the cost of circuit and system complexity [2–4]. Recent works [5–6] proposed to implement an array of detectors based on SPAD working in parallel thus extending the speed of QRNG up to 5 Gb/s [5]. Despite the high bit rate, the main drawback of [5] is the strong dependence of each pixel bias on the impinging light intensity which forces the system to work only for a narrow range of photon flux that poses several constraints on the design of the final QRNG system, e.g. the need of a feedback control loop to maintain a constant flux of photons, and of a uniform distribution of light over the entire sensor. Moreover, it is impractical to implement algorithms for bit extraction to all detectors of the array because of different responses and mismatches among SPADs.

DOI
10.1109/isscc.2016.7418022

Related papers

A SPAD-Based Random Number Generator Pixel Based on the Arrival Time of Photons

Nicola Massari, Leonardo Gasparini, Alessio Meneghetti +1 more

A quantum random generator based on photon detection is here presented. The system consists of a source of photons, typically a commercial LED, coupled with a detector with single photon detection capability. The detector in this case is represented by a single pixel consisting of a SPAD and a time stamp circuit, which samples the arrival time of impinging photons within a predefined temporal window. The proposed implementation increases the efficiency of random bit extraction and reduces the afterpulsing probability, which can introduce undesirable correlation to the measurement. Preliminary results are reported, showing that the pixel has a flat behavior for a relevant range of intensity of the light, which makes the pixel robust against variations of external PVT parameters

IEEE International Conference on New Generation of Circuits and Systems (NGCAS)•Sep 1, 2017•5 citations

A SPAD-based random number generator pixel based on the arrival time of photons

Xu H, Massari N, Gasparini L +2 more

A quantum random generator based on photon detection is here presented. The system consists of a photon source, typically a commercial LED, coupled with a detector with single photon detection capability. The detector is composed of a Single-Photon Avalanche Diode (SPAD) and a time stamp circuit, which samples the arrival time of impinging photons within a predefined temporal window. The proposed implementation optimizes the area, allowing embedding all circuitry into a single pixel, and increases the efficiency of random bit extraction. Moreover, the adopted fast pre-charge mode of the SPAD quenching circuit reduces the afterpulsing probability, and hence possible undesirable correlation in the resulting random bit sequence. Thanks to the implemented random bit extraction, experimental results show that the pixel has a flat behavior for a significant range of light intensity, which makes the pixel robust against variations of external PVT parameters. The maximum achievable bit rate has been measured equal to 1 Mbps, while random sequences are shown to pass NIST tests without any post-processing.

•Jan 1, 2019•0 citations

A Fully Integrated Quantum Random Number Generator for Cryptographic Application

Nicola Massari, Luca Parmesan, Alessandro Tontini +7 more

A compact quantum random number generator (QRNG) based on an array of Single Photon Avalanche Diodes (SPADs) is presented here. The main feature of the proposed chip is the capability to generate random numbers without the use of any external source of light. In this view, SPADs are configured to be used in two ways: 1) as a controlled light emitter and 2) as a detector. An embedded logic is able to distinguish dark events against detected emitted photon in such a way to make the system sensitive only to the presence of light. The extracted random bits show a uniform distribution and the QRNG, thanks to an integrated conditioning block maximizing the output entropy, eventually passes all AIS31 tests. The average raw bit rate in the default device configuration (one enabled column) is measured equal to 800 kbps.

IEEE Transactions on Circuits and Systems I Regular Papers•Apr 16, 2026•0 citations

Exploration of SPAD Based CMOS QRNG Designs

Alex Janssen

In today's digital life, security and encryption are becoming more and more important. As random number generators are a fundamental block of security and encryption, it is crucial to guarantee that these devices operate securely. Random numbers are usually generated in two ways; pseudo random number generators (PRNGs) and true random random number generators (TRNGs). PRNGs output a sequence based on a seed and a mathematical function. The deterministic nature of pseudo RNG devices can result in the PRNG not being applicable for all protocols, in which case TRNGs are needed. Almost all strong cryptography requires TRNGs to generate keys. The difference is that these devices instead rely on real world physics in order to generate a random number. The TRNG implementation explored in this thesis makes use of the quantum mechanical properties of photons. TRNGs making use of this principle of elementary quantum mechanical decision making are called quantum random number generators (QRNGs). This source of entropy provided by photons can be extracted by utilizing SPADs. QRNG devices based on SPADs have been made before in different ways, however there are still large grounds undiscovered when concerning SPAD based designs. As SPAD based QRNGs can be completely produced using CMOS technology, a world of possibilities open, including integration with already existing designs. Different aspects of SPAD QRNG designs will be discussed in this thesis; size, speed, hybrid designs and QRNG test-benching. The first part of the exploration focuses on creating an as small as possible QRNG. This resulted in a QRNG design which is as small as just one flip-flop and one SPAD, which is the smallest QRNG at the time of writing to the authors knowledge. Simulations show that the device is able to run up to 25 Mb/s using a SPAD with low deadtime. This device has been produced using 140nm technology by STMicroelectronics. The second part of the exploration, delves into how fast a SPAD based QRNG can be. The main goals here were to make the fastest possible QRNG with good scalability characteristics. This resulted in a design proposition based on the difference in the time of flight of two photons. This design is simulated using Matlab, and can reach 70 Mb/s per SPAD-duo depending on the deadtime of the SPAD used. When using a SPAD with a deadtime of 1us, the scaled up design needs only 16% of the SPADS needed by a state-of-the-art SPAD based QRNG design based on simulations. The amount of SPADs needed however schales almost linearly with a lower deadtime, having the potential to need only a fraction of the SPADs needed by the state-of-the-art in order to reach the same speeds. Then the concept of hybrid devices is explored, making use of a combination of PRNG and QRNG systems. The first hybrid design proposed is a design in which a very small QRNG is used to generate the key for multiple secure PRNG systems. The PRNG system used in this design is a trivium stream cypher. The design is completely written in VHDL except for the external QRNG. It then has been compiled and simulated using ModelSim, again using 140nm technology by STMicroelectronics. This resulted in a design which is able to reach speeds of 640 Gb/s, while using a total area of 99936 um2. The second hybrid device proposes a LFSR based design, which makes use of multiple very small QRNG devices to influence the function that the LFSR implements in order to increase the security. The last part of the exploration explores how it can be made easier and faster to test QRNG designs in an early design stage more accurately. As the source of entropy is quantum, the only risk of affecting the randomness is purely in which form the data of the photons is processed. By creating a chip which is able to extract the time of flight and the exact location of where the photon hit, testing potential QRNG devices can already be done in an early design stage with real-time data. A part of the chip that measures the time of flight of the photons arriving, has been designed in 40nm technology by STMicroelectronics. This part is a novel counter based on the principle of Gray counting, and is simulated extensively using extracted layout simulations. These simulations show that the device is able to run at speeds up to 3.6 GHz.

•Jan 1, 2017•0 citations

SPADs for quantum random number generators and beyond

Samuel Burri, Damien Stucki, Y. Maruyama +3 more

Single-Photon Avalanche Diodes (SPADs) are solid-state photo-detectors capable of detecting single photons by exploiting the avalanche effect that occurs in the breakdown of a p-n junction biased above breakdown voltage. By this effect, a SPAD translates an incoming photon to a macroscopic current pulse. These devices are currently used for building medical devices characterized by a very high time resolution. An appealing application of SPAD is to use them as a basic block for building the entropy source of true random number generators. In this paper we focus on such application, and we explore the design challenges behind the realization of a quantum random number generator based on a massively parallel array of SPADs. The matrix under investigation comprises 512×128 independent cells that convert photons onto a raw bit-stream, which, as ensured by the properties of quantum physics, is characterized by a very high level of randomness. The sequences are read out in a 128-bit parallel bus, concatenated, and pipelined onto a de-biasing filter. Subsequently, we fabricated the proposed chip using a standard CMOS process. Our results, achieved on the manufactured device and coupling two matrices, show that our architecture can reach up to 5 Gbit/s while consuming 25pJ/bit, thus demonstrating scalability and performance for any random number generators based on SPADs.

Asia and South Pacific Design Automation Conference (ASP-DAC)•Jan 1, 2014•13 citations

A low bias variation SPAD-based pixel for a quantum random generator

Nicola Massari, Leonardo Gasparini, Alessandro Tomasi +3 more

The present work is focused on the description of a SPAD-based pixel suitable for random bits extraction. Compared to the state-of-the-art, the proposed approach aims at improving the performance of the random generator with respect to possible photon flux variation. Thanks to the adopted methodology, the entropy of the output is maintained almost constant over a wide range of operating conditions. The principle has been validated through simulations and implemented in a compact pixel, suitable for array implementation.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Oct 13, 2015•2 citations
A robust true random number generator (TRNG), able to assure high quality output at different working conditions, is an attractive solution in secure communication application, because it increases resilience against possible external attacks. Among different TRNGs, quantum RNGs (QRNG) represent a good candidate for such systems, because of their compactness, low cost and performance [1–6]. They typically consist of a source of photons, such as an attenuated LED, coupled to a detector with single photon capability (SPAD). Many works in the literature have used a single detector [1–4] for random bit extraction. These devices are characterized by a limited bit rate [1], which can be increased by exploiting the arrival time of photons at the cost of circuit and system complexity [2–4]. Recent works [5–6] proposed to implement an array of detectors based on SPAD working in parallel thus extending the speed of QRNG up to 5 Gb/s [5]. Despite the high bit rate, the main drawback of [5] is the strong dependence of each pixel bias on the impinging light intensity which forces the system to work only for a narrow range of photon flux that poses several constraints on the design of the final QRNG system, e.g. the need of a feedback control loop to maintain a constant flux of photons, and of a uniform distribution of light over the entire sensor. Moreover, it is impractical to implement algorithms for bit extraction to all detectors of the array because of different responses and mismatches among SPADs.
A quantum random generator based on photon detection is here presented. The system consists of a source of photons, typically a commercial LED, coupled with a detector with single photon detection capability. The detector in this case is represented by a single pixel consisting of a SPAD and a time stamp circuit, which samples the arrival time of impinging photons within a predefined temporal window. The proposed implementation increases the efficiency of random bit extraction and reduces the afterpulsing probability, which can introduce undesirable correlation to the measurement. Preliminary results are reported, showing that the pixel has a flat behavior for a relevant range of intensity of the light, which makes the pixel robust against variations of external PVT parameters
A quantum random generator based on photon detection is here presented. The system consists of a photon source, typically a commercial LED, coupled with a detector with single photon detection capability. The detector is composed of a Single-Photon Avalanche Diode (SPAD) and a time stamp circuit, which samples the arrival time of impinging photons within a predefined temporal window. The proposed implementation optimizes the area, allowing embedding all circuitry into a single pixel, and increases the efficiency of random bit extraction. Moreover, the adopted fast pre-charge mode of the SPAD quenching circuit reduces the afterpulsing probability, and hence possible undesirable correlation in the resulting random bit sequence. Thanks to the implemented random bit extraction, experimental results show that the pixel has a flat behavior for a significant range of light intensity, which makes the pixel robust against variations of external PVT parameters. The maximum achievable bit rate has been measured equal to 1 Mbps, while random sequences are shown to pass NIST tests without any post-processing.
A compact quantum random number generator (QRNG) based on an array of Single Photon Avalanche Diodes (SPADs) is presented here. The main feature of the proposed chip is the capability to generate random numbers without the use of any external source of light. In this view, SPADs are configured to be used in two ways: 1) as a controlled light emitter and 2) as a detector. An embedded logic is able to distinguish dark events against detected emitted photon in such a way to make the system sensitive only to the presence of light. The extracted random bits show a uniform distribution and the QRNG, thanks to an integrated conditioning block maximizing the output entropy, eventually passes all AIS31 tests. The average raw bit rate in the default device configuration (one enabled column) is measured equal to 800 kbps.
In today's digital life, security and encryption are becoming more and more important. As random number generators are a fundamental block of security and encryption, it is crucial to guarantee that these devices operate securely. Random numbers are usually generated in two ways; pseudo random number generators (PRNGs) and true random random number generators (TRNGs). PRNGs output a sequence based on a seed and a mathematical function. The deterministic nature of pseudo RNG devices can result in the PRNG not being applicable for all protocols, in which case TRNGs are needed. Almost all strong cryptography requires TRNGs to generate keys. The difference is that these devices instead rely on real world physics in order to generate a random number. The TRNG implementation explored in this thesis makes use of the quantum mechanical properties of photons. TRNGs making use of this principle of elementary quantum mechanical decision making are called quantum random number generators (QRNGs). This source of entropy provided by photons can be extracted by utilizing SPADs. QRNG devices based on SPADs have been made before in different ways, however there are still large grounds undiscovered when concerning SPAD based designs. As SPAD based QRNGs can be completely produced using CMOS technology, a world of possibilities open, including integration with already existing designs. Different aspects of SPAD QRNG designs will be discussed in this thesis; size, speed, hybrid designs and QRNG test-benching. The first part of the exploration focuses on creating an as small as possible QRNG. This resulted in a QRNG design which is as small as just one flip-flop and one SPAD, which is the smallest QRNG at the time of writing to the authors knowledge. Simulations show that the device is able to run up to 25 Mb/s using a SPAD with low deadtime. This device has been produced using 140nm technology by STMicroelectronics. The second part of the exploration, delves into how fast a SPAD based QRNG can be. The main goals here were to make the fastest possible QRNG with good scalability characteristics. This resulted in a design proposition based on the difference in the time of flight of two photons. This design is simulated using Matlab, and can reach 70 Mb/s per SPAD-duo depending on the deadtime of the SPAD used. When using a SPAD with a deadtime of 1us, the scaled up design needs only 16% of the SPADS needed by a state-of-the-art SPAD based QRNG design based on simulations. The amount of SPADs needed however schales almost linearly with a lower deadtime, having the potential to need only a fraction of the SPADs needed by the state-of-the-art in order to reach the same speeds. Then the concept of hybrid devices is explored, making use of a combination of PRNG and QRNG systems. The first hybrid design proposed is a design in which a very small QRNG is used to generate the key for multiple secure PRNG systems. The PRNG system used in this design is a trivium stream cypher. The design is completely written in VHDL except for the external QRNG. It then has been compiled and simulated using ModelSim, again using 140nm technology by STMicroelectronics. This resulted in a design which is able to reach speeds of 640 Gb/s, while using a total area of 99936 um2. The second hybrid device proposes a LFSR based design, which makes use of multiple very small QRNG devices to influence the function that the LFSR implements in order to increase the security. The last part of the exploration explores how it can be made easier and faster to test QRNG designs in an early design stage more accurately. As the source of entropy is quantum, the only risk of affecting the randomness is purely in which form the data of the photons is processed. By creating a chip which is able to extract the time of flight and the exact location of where the photon hit, testing potential QRNG devices can already be done in an early design stage with real-time data. A part of the chip that measures the time of flight of the photons arriving, has been designed in 40nm technology by STMicroelectronics. This part is a novel counter based on the principle of Gray counting, and is simulated extensively using extracted layout simulations. These simulations show that the device is able to run at speeds up to 3.6 GHz.
Single-Photon Avalanche Diodes (SPADs) are solid-state photo-detectors capable of detecting single photons by exploiting the avalanche effect that occurs in the breakdown of a p-n junction biased above breakdown voltage. By this effect, a SPAD translates an incoming photon to a macroscopic current pulse. These devices are currently used for building medical devices characterized by a very high time resolution. An appealing application of SPAD is to use them as a basic block for building the entropy source of true random number generators. In this paper we focus on such application, and we explore the design challenges behind the realization of a quantum random number generator based on a massively parallel array of SPADs. The matrix under investigation comprises 512×128 independent cells that convert photons onto a raw bit-stream, which, as ensured by the properties of quantum physics, is characterized by a very high level of randomness. The sequences are read out in a 128-bit parallel bus, concatenated, and pipelined onto a de-biasing filter. Subsequently, we fabricated the proposed chip using a standard CMOS process. Our results, achieved on the manufactured device and coupling two matrices, show that our architecture can reach up to 5 Gbit/s while consuming 25pJ/bit, thus demonstrating scalability and performance for any random number generators based on SPADs.
The present work is focused on the description of a SPAD-based pixel suitable for random bits extraction. Compared to the state-of-the-art, the proposed approach aims at improving the performance of the random generator with respect to possible photon flux variation. Thanks to the adopted methodology, the entropy of the output is maintained almost constant over a wide range of operating conditions. The principle has been validated through simulations and implemented in a compact pixel, suitable for array implementation.