Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk4 min

Don’t Trust the Randomness API: Verify drand Beacons and Sampled Values

A drand relay delivers beacon data, but your application must verify the signature against a trusted chain identity. Learn how to check rounds and derive bounded samples without modulo bias.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A drand API response is only trustworthy when its beacon signature verifies against a public key and chain identity your application already trusts. HTTPS protects the connection to a relay; it does not prove that the relay returned a valid drand beacon. Pin the intended chain, verify the signature and round, and treat conversion into an application-level sample as a separate step.

What beacon verification does—and does not—prove

A drand beacon contains a round number and a BLS signature. The signature is the cryptographic material to verify; a response’s randomness field is not proof by itself. drand’s protocol and operator guidance identify chain information as the client’s root of trust. That means the public key and relevant chain parameters must come from a trusted source, not merely from the same relay delivering the beacon. See the drand protocol specification and operator documentation.

As an Amazon Associate I earn from qualifying purchases.

Verification establishes that the returned beacon is valid for the configured chain and protocol rules. It does not establish that your application selected a fair round, mapped the verified output to a bounded value without bias, or used that value in a manipulation-resistant way. Those are separate design obligations.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose the chain and pin its identity

First decide which drand network and scheme your application intends to consume. The official HTTP/API documentation describes the documented networks and endpoint patterns; check it for current network names and endpoints, since these can change.

#1 Best Overall
Random Number Generator - Incorporates a Visual Laboratory Grade Random Number Generator (RNG) Designed specifically for PSI Testing. Test for Psychokinesis (PK), Precognition and Telepathy.
  • THE RANDOM NUMBER GENERATOR (RNG-01) is a laboratory quality instrument that uses the immutable randomness of radioactivity decay to generate random numbers
  • THE RNG-01 PRODUCES approximately one to three random numbers every minute from background radiation.
  • TRUE RANDOM NUMBERS that are useful for data encryption (cryptography), statistical mechanics, probability, gaming, neural networks and disorder systems, PSI and ESP testing, micro PK experiments, etc.
  • SELECTION OF RANDOM NUMBER RANGES: 1-2, 1-4, 1-8, 1-16, 1-32, 1-64 and 1-128 .
  • This unit is the Clear Transparent Etched Case. IMAGES SCIENTIFIC INSTRUMENTS INC., manufacturing electronic instruments and kits for over 25 years.

Obtain the intended chain information through a trusted out-of-band channel. Pin the expected public key and chain parameters in application or deployment configuration. A relay’s /info response is useful for comparison, but should not establish trust on its own: an untrusted node could provide a different key. The official JavaScript examples advise comparing expected chainHash and publicKey values with the endpoint’s chain information. See drand developer documentation.

Verify the beacon and its round

Prefer a maintained client

When practical, use a maintained drand client and leave beacon verification enabled. The official libraries are designed to verify randomness rounds and offer features such as failover, racing, aggregation, and caching. These features can simplify delivery, but they do not remove the need to select and inspect the intended chain identity. The API documentation describes client libraries and transports; it does not provide an independent benchmark of their latency, availability, or security trade-offs.

Keep signature checks enabled

In the official JavaScript examples, disableBeaconVerification is false, and the examples allow expected chain identity to be supplied through chainVerificationParams. Setting verification to true disables signature checking; the drand examples label this insecure. Configure the expected chain hash and public key where supported, and confirm that the client actually verifies the beacon rather than merely parsing the response. Refer to the drand Code Examples for current option names and usage.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Rakstore ATECC608A Cryptographic Password Key Memory Storage IIC I2C Random Number Generator RNG Encryption Decryption Module
  • This password key storage, random number generator. Protected storage of up to 16 keys, certificates or data. Hardware support for asymmetric signature, verification, and key agreement.
  • It can be applied to the key management and exchange of IoT endpoints, encrypted small messages and PI data, secure boot and protection download and ecosystem control, anti-cloning and other fields.
  • Curve support: NIST standard P256 elliptic curve , Random number generator (RNG): high quality FIPS 800-90 A/B/C
  • IIC interface: 1MHz standard , IO port level: 1.8-5.5V
  • Power supply voltage: 25.5V

If you call the HTTP API directly

The API supports fetching the latest beacon or a specific round. Its responses include the round and BLS signature; chained responses may also include previous_signature. A direct integration must implement the protocol’s signature verification and expected-message rules against the pinned chain information. Checking only TLS, the JSON shape, or the randomness field is not equivalent to cryptographic verification. The endpoint and response details are documented in the HTTP/API reference.

Apply the right rule for the scheme

For a chained scheme, each beacon incorporates the previous signature, linking rounds; verify the relevant link as required by the protocol. For an unchained scheme, that link is absent, and chain integrity is not required to verify an individual random value. Do not apply chained assumptions to an unchained chain—or treat a missing previous-signature field as proof of a fault without first identifying the scheme. The distinction is specified in the protocol specification.

Validate the requested round

A round maps to time using the chain’s genesis time and period. Check that the returned round is the one your application requested or intended, using that chain’s rules. Missed rounds can occur; after recovery, the next beacon may build on the last successfully generated beacon. A missing round alone therefore does not prove a forged response, and applications should handle unavailable rounds explicitly rather than assuming every scheduled period produced a beacon. See the operator documentation and protocol specification.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Derive a bounded sample without modulo bias

The verified signature and the bounded sample are different outputs of your pipeline. The drand tutorial describes hashing the signature to obtain a random value and suggests rejection sampling by re-hashing signatures as an exercise. See the drand tutorial.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a target range of 0 through n - 1, do not simply compute a large integer modulo n unless the source range is an exact multiple of n: otherwise some outcomes occur more often than others. A rejection-sampling method can avoid that bias under its assumptions:

  1. Define the output range and an unambiguous byte encoding for the verified signature and any retry counter.

  2. Hash that encoding to obtain a candidate integer drawn from a fixed-width space of size M (for a b-bit candidate, M = 2b).

  3. Let limit = M - (M mod n). If the candidate is at least limit, derive a new candidate using the next retry counter and hash again.

    Free tools Windows power users keep installed

    One-click scans. No signup required.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  4. Otherwise, return candidate mod n. The accepted range has a size divisible by n, so every result has the same number of candidate preimages, assuming the hash output behaves uniformly for this use.

Specify the hash, encoding, candidate width, counter rule, and range in your implementation so independent consumers can reproduce the sample. The tutorial’s exercise is not a complete standardized sampling API; do not imply that a particular mapping is mandated by drand.

Operational checklist

  • Choose the intended network and scheme from current drand documentation.
  • Get the chain public key and parameters from a trusted out-of-band source; pin them in configuration.
  • Compare endpoint chain information, including chain hash and public key, with the pinned values.
  • Fetch the intended round and verify its signature using the correct scheme rules.
  • Handle missed or unavailable rounds explicitly.
  • If producing a bounded value, document and implement an unbiased mapping separately from beacon verification.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.