by Andrew Cardno
As a tribal gaming operator, the integrity of your games is the foundation of your business. Guests trust that every spin of a slot machine, every deal of an electronic table game, and every wager placed is governed by fair and unpredictable outcomes. This trust is largely built on Pseudo-Random Number Generators (PRNGs), the systems that ensure game results cannot be manipulated or predicted. But with the recent breakthrough in quantum computing, the security of traditional PRNGs may soon be challenged in ways the industry has never faced before.
Quantum computing has long been discussed as a futuristic concept, but Google’s latest advancements suggest that the future may be closer than expected. The computing power once thought impossible is becoming a reality, and with it comes a growing risk that the methods casinos have relied on to secure their games could be vulnerable to quantum-powered prediction. While this isn’t an immediate crisis, it’s a development the industry needs to be aware of. By understanding how quantum computing could impact your tribal gaming operation, you can take proactive steps to ensure that the industry remains robust in the years ahead.
Why Traditional PRNGs Could Be at Risk
The “random” numbers generated in electronic games aren’t truly random; they are created by algorithms that use an initial seed number to produce sequences that appear random but are actually deterministic. While today’s PRNGs are designed to be incredibly difficult to predict, they are not unbreakable, especially when faced with the sheer power of quantum computing.
This isn’t just theoretical. Between 2014 and 2017, a group of hackers in Eastern Europe exploited weaknesses in older slot machine RNGs. By recording game outcomes and analyzing patterns, they were able to predict when a machine was likely to hit a winning combination. They didn’t need to change the game’s programming – they simply leveraged statistical analysis to gain an unfair advantage.
Now, imagine a scenario where a quantum computer, far more powerful than anything available today, could rapidly analyze and reverse-engineer a PRNG’s sequence. Instead of spending weeks collecting data, a sophisticated attacker using quantum computing could potentially determine game outcomes in seconds. The very foundation of fair gaming would be at risk.
Shor’s Algorithm and its Impact on Security
Traditional computers process information in binary – each bit is either a 0 or a 1. Quantum computers, however, use quantum bits (qubits), which can exist in multiple states simultaneously. This allows them to process vast amounts of information in parallel, solving certain problems that are unsolvable on traditional computers.
For years, quantum computing has been limited by technical challenges that constrain the type of problem it can solve. Paradoxically, quantum computers can provide a true RNG already. However, the challenge of solving complex algorithms such as predicting pseudo-random number sequences requires large numbers of qubits, and the error in the physics experiment that is the resolution of a quantum calculation has made this impossible. This may be changing as Google has announced a new quantum technique where they have overcome the errors inherent in large quantum calculations.
It is fair to say that there have been many claims from different technology companies that they have overcome these quantum error functions, so take these claims with a grain of salt. Having said that, if they are indeed true, quantum computers will be able to solve problems that are intractable with current computing capabilities, such as reverse engineering of security capabilities (using Shor’s algorithm) or prediction of pseudo-random number sequences.
The existence of Shor’s algorithm and the knowledge that a quantum computer with sufficient computational capacity can reverse-engineer an encryption key has triggered a rebuilding of the fundamental technologies for encryption around the world. In some ways, this is like a space race where encryption keys are being made more sophisticated while quantum computers continue to grow in capabilities. Having said this, there are alternative encryption techniques, for example, quantum encryption, that are well underway, and there is optimism that encryption will not be meaningfully compromised by quantum computers.
Quantum Algorithms and the Threat to PRNGs
There are a wide variety of PRNG algorithms with different levels of algorithmic hacking. One example that exists in some older machines uses a linear congruential generator (LCG); this algorithm was hacked by a group of cheating teams using traditional computers. These hacks resulted in more advanced PRNGs being applied that use cryptographically secure PRNGs (CSPRNGs), and most modern PRNGs are designed to resist quantum attacks by having real-world entropy involved in their calculations.
The challenge is that the capabilities of large-scale quantum computers and new algorithms for solving heretofore unsolvable problems at scale are largely unexplored. Consider the example of a large-scale entropy observational technique monitoring large numbers of games and providing for a prediction of bonus round effects. In effect, this incredibly complex computation could predict random number outcomes.
Quantum computing introduces an entirely new set of computer science discovery and thought processes. This entirely new set, when compared to traditional computing, is largely undiscovered. With this invention of viable quantum computing, as has been announced by Google and D-Wave, computer scientists and mathematicians around the world will be designing new and more sophisticated algorithms to solve a wide range of problems.
The fundamental characteristic of a quantum computer is that it is able to find perfect solutions to problems that would require a traditional computer to evaluate extraordinarily large numbers of combinations of data points. Consider the hypothetical example of a known set of 500 pseudo-random numbers and then a prediction of the 501st number; traditional computers would not be able to solve this problem because of the vast number of combinations of data. While this author does not know of an algorithm that can do this, the nature and complexity of the problem is one that a quantum computer could theoretically solve.
Grover’s Algorithm and the Future of PRNG Attacks
To illustrate the kind of algorithms that are possible, let’s examine Grover’s algorithm, which is a quantum search algorithm. Consider having a database of 100 trillion rows and wanting to find the location of one specific element within that. Grover’s algorithm allows the finding of that element time proportional to the square root of the number of rows, in other words, about 10 million data reads. Traditional databases would need to scan the whole file, in other words, about 50 trillion data reads.
Grover’s algorithm may be adaptable to an attack against PRNGs by efficiently searching for the internal state of the machine, thus allowing secondary quantum attacks against future PNRG numbers. And Grover’s algorithm is just one example. As quantum computing progresses, new algorithms will emerge that may be specifically designed to predict pseudo-random numbers, even if we don’t yet know what these algorithms will be. The industry must remain aware of these developments to stay ahead of potential vulnerabilities.
Moving Toward Quantum-Secure Random Number Generation
While quantum computing may present a threat to traditional PRNGs, it also offers a potential solution: Quantum Random Number Generators (QRNGs). Unlike PRNGs, which rely on deterministic algorithms, QRNGs generate randomness through fundamental quantum processes, such as measuring the decay of subatomic particles. Because these quantum effects are inherently unpredictable – even to a quantum computer – QRNGs are considered truly random and resistant to hacking.
Some gaming technology providers have already begun researching ways to integrate QRNGs into casino equipment. Transitioning to quantum-secure RNGs will likely involve:
Upgrading Hardware: QRNGs require specialized devices that harness quantum effects to generate randomness. These devices would need to be tamper-proof and certified by gaming regulators.
Updating Software and Firmware: Existing gaming machines and back-end systems would need updates to incorporate QRNG-based randomness, replacing legacy PRNG methods.
Regulatory Approval and Testing: As with any major technology shift, extensive certification processes would be required to ensure compliance with gaming regulations.
Preparing for a Quantum-Resistant Future
While quantum computing’s impact on gaming security may not be an immediate concern, the industry must begin preparing now. The first step is awareness – understanding that as quantum capabilities advance, traditional PRNGs could become obsolete.
By staying informed, engaging with technology providers, and encouraging industry-wide dialogue, you can ensure that your casino remains ahead of the curve. The future of gaming will always involve technological evolution. By preparing today, you ensure that your operation remains trusted, secure, and resilient – no matter how insanely powerful computers become.
Andrew Cardno is Co-Founder and Chief Technology Officer of Quick Custom Intelligence (QCI). He can be reached by calling (858) 299-5715 or email [email protected].