女生小视频

Mathematics

We鈥檝e finally cracked how to make truly random numbers

From machine learning to voting, the workings of the world demand randomisation, but true sources of randomness are surprisingly hard to find. Now quantum mechanics has supplied the answer

By Michael Brooks

9 December 2025

New 女生小视频. Science news and long reads from expert journalists, covering developments in science, technology, health and the environment on the website and the magazine.

Phillip Harris

Eeny, meeny, miny, mo, catch a tiger by the toe 鈥 so the rhyme goes. But even children know that counting-out rhymes like this are no help at making a truly random choice. Perhaps you remember when you first realised you could game the outcome by carefully choosing the starting point?

Flipping a coin, or rolling a dice, might be better, but try to prove that the outcome of your flip or roll is random and you will be stymied. That鈥檚 because these things aren鈥檛 truly random: if you knew the precise position of the dice or coin in your hand, the trajectory of the throw, the strength of gravity and subtle factors like air resistance or the friction of the landing surface, you could predict the result. is hard to come by.

The thing is, we now know that randomness is real, baked into the very fabric of the universe in the form of quantum mechanics. Given a choice of two paths, a quantum entity 鈥 like an electron or a photon of light 鈥 will take one entirely at random: there is no predictable cause behind a quantum effect. The Colorado University Randomness Beacon, affectionately nicknamed , takes advantage of this phenomenon. It came online this year as the world鈥檚 first publicly accessible source of traceable, verifiable, truly random numbers.

You might wonder who needs such radical randomness. After all, people have been happily throwing dice and flipping coins for millennia. But there are applications where it is essential to generate as much randomness as possible. 鈥淧eople don鈥檛 realise it, but聽without randomness, digital life wouldn鈥檛 be secure or fair,鈥 says , a computer scientist with an interest in verifiable randomness聽at Nottingham Trent University in the UK. Every time you connect to a secure web page or generate a secure password, there is a level of randomness at play, he says. And machine learning has randomness built into the training.

Another use is supporting democracy. In Chile, for instance, politicians and public servants are subjected to random tax audits, and those chosen tend to object that the system is targeting them for a nefarious reason. 鈥淓verybody complains that it’s a witch hunt,鈥 says , one of CURBy鈥檚 creators at the US National Institute of Standards and Technology (NIST). Those claims are much harder to make if the system employs a randomness beacon whose numbers are derived from truly random sources.

At the moment, the Chilean government gets its randomness from analysing, among other things, seismic activity and the output of the University of Chile鈥檚 radio station. But it still isn鈥檛 fully random: seismic activity happens for a reason, after all, and someone is deciding the radio station鈥檚 playlist. Nor is it fully traceable, given that people can鈥檛 routinely access seismic data. CURBy, though, is both.

The quantum randomness generator

Ten years ago, the system was 鈥渉eld together by duct tape and prayers鈥, according to Shalm. That was when the researchers behind it first made their painstaking proof of principle for CURBy. In the intervening time, they have been working to make the system fast, automated and ready for use 鈥 at any time 鈥 by anyone with access to the internet.

Now CURBy is a cutting-edge facility dealing with thousands of user requests every day. It could help shore up democracy, improve trust in judicial systems and even bring harmony to a family game night. 鈥淐URBy represents a working, publicly-accessible quantum technology. For me, this is an exciting development,鈥 says , a physicist at the Polytechnic Institute of Paris.

People don鈥檛 realise it, but without randomness, digital life wouldn鈥檛 be secure

Creating truly random numbers is tough. Very little in the universe operates by true randomness because, unless you are dealing with quantum stuff, there is always a mechanism behind the number generation. Even computers that produce 鈥減seudo-random鈥 numbers to create secure passwords can be gamed. The passwords are generated from a 鈥渟eed鈥 number, and if you know the seed and the algorithm, there is nothing random about them at all.

You could go further and use 鈥渉igh entropy鈥 sources of randomness such as the unpredictable timing of a radioactive decay from a lump of material – cobalt-60 or strontium-90, perhaps. This is a random, quantum event, but one that is . And unless someone is in the room with you, you can鈥檛 always prove that you didn鈥檛 just make up the numbers.

Physicists (left to right) Jasper Palfree, Gautam Kavuri and Krister Shalm entangling photons for random number generation

Physicists (left to right) Jasper Palfree, Gautam Kavuri and Krister Shalm entangling photons for random number generation

Rebecca Jacobson/NIST

It also makes for a rather dangerous game of Yahtzee 鈥 and with CURBy now available, there鈥檚 just no need to expose family members to radiation. Instead, CURBy relies on pairs of photons connected by a quantum phenomenon called quantum entanglement.

When two entities are entangled, they behave as if they are, in some respect, a single thing. This weird situation shows up when you perform a measurement on one of the entities, then carry out a similar measurement on the other. In certain circumstances, the first measurement affects the outcome of the second, even if the quantum objects have been moved to opposite sides of the universe and cannot possibly have exchanged any information. It is like rolling two dice and finding that if one turns up as a 6, the other always settles as a 1.

The entanglement between quantum objects, famously dubbed 鈥渟pooky action at a distance鈥 by Albert Einstein, defies common sense: it occurs without any signal being sent between the two. No one has ever come up with a physical mechanism for how it happens.

Inside CURBy, the entanglement shows up in measurements of a property called polarisation. Pairs of entangled photons are separated and sent through optical fibres to two destinations 100 metres apart. At each location, the apparatus measures the polarisation, with only a very short time elapsing between the two measurements.

Next, the results of the measurements are 鈥渃orrelated鈥: there is a subtle relationship between the outcomes, whose extent CURBy can analyse. Under 鈥渃lassical鈥 conditions, there is an upper limit to this extent, but if the behaviour is truly quantum, and therefore random, the limit is exceeded and can be used to produce random numbers. This is done by 鈥減urifying鈥 the inherent randomness using a technique called Trevisan extraction. CURBy can make around 250,000 polarisation measurements per second, and it takes around 15 million measurements to produce its end product: a string of 512 truly random binary digits, or bits, that people can use however they wish.

Rolling casino dice

Rolling dice is never truly random

RLBPhotography / Alamy Stock Pho

If you want to know exactly how random those bits are, there鈥檚 an algorithm for that. Given that there are 512 bits in a string, and each bit can be 0 or 1, that means there are 2512 possible combinations. 鈥淚t鈥檚 a massive number of possibilities,鈥 says Shalm.

All of them should be equally likely to crop up, and Shalm and his colleagues have been able to measure the likelihood of a particular string of bits appearing. It isn鈥檛 perfectly even, but it might as well be. Think of it as wanting a road that鈥檚 completely flat. If the gradient is 1 in 10, that鈥檚 a steep hill. Even 1 in 100 鈥 1 metre of rise in 100 metres of road 鈥 is noticeable. The gradient equivalent to CURBy鈥檚 randomness is 1 in more than 184 quintillion: as random as anyone needs.

Proving randomness

The randomness isn鈥檛 CURBy鈥檚 only selling point 鈥 in fact, the main thing is that anyone can trace the numbers back to where they came from and prove they are random, says Shalm. 鈥淭here isn鈥檛 currently a good way to do that with any kind of random number generator,鈥 he says.

To make their randomness traceable, the CURBy researchers have borrowed from the blockchain mathematics used to guarantee the security of digital assets like NFTs and cryptocurrency. It is essentially a way of verifying what was done when and by whom 鈥 in a scenario where nobody trusts anyone 鈥 and everything can be traced right back to the original output from the experiment.

The other factor that makes it hard for anyone to game the system is that the whole process is distributed among a range of institutions. NIST passes the quantum data to apparatus at the University of Colorado Boulder for processing, and then an independent cryptographic service known as the Distributed Randomness Beacon Daemon adds its own set of ingredients to extract the true randomness contained in the measurement data and convert it into the final, uniform binary string.

鈥淚t’s almost like a spider’s web of connected, time-ordered things,鈥 says Shalm. 鈥淣o one party has complete control over what the random bits are, and you can go back and see if anybody cheated or tried to change things around.鈥

The integration of all the necessary physics with high-level security analyses is 鈥渜uite remarkable鈥, says Brown. Quantum technologies are generally still very much in a developmental stage, he points out, with few complete products available. But will CURBy be useful? Undoubtedly, says Brown 鈥 although there are applications where you definitely shouldn鈥檛 use traceable randomness. 鈥淵ou don’t want to choose your passwords based on a public source of randomness,鈥 he says.

But the selection of jurors and judges for cases, the generation of lottery results and randomised sampling in clinical trials are some examples of where traceable randomness would be a boon. University of Oxford mathematician is also impressed. The way the CURBy team has blended quantum and classical physics to create a cutting-edge but accessible technology is a sign of things to come, he says.

In fact, says Shalm, CURBy is itself explicitly designed to be compatible with other technologies coming down the line. In other words, true randomness is going to be built into all our futures, making the world a fairer and safer place. It sure beats a coin flip.

Topics:

Sign up to our weekly newsletter

Receive a weekly dose of discovery in your inbox. We'll also keep you up to date with New 女生小视频 events and special offers.

Sign up
Piano Exit Overlay Banner Mobile Piano Exit Overlay Banner Desktop