blob: 4ee2c10cb136f0ba04dfc3282b8cf8581c18c7f5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
<table class="head">
<tr>
<td class="head-ltitle">RNDTEST(4)</td>
<td class="head-vol">Device Drivers Manual</td>
<td class="head-rtitle">RNDTEST(4)</td>
</tr>
</table>
<div class="manual-text">
<section class="Sh">
<h1 class="Sh" id="NAME"><a class="permalink" href="#NAME">NAME</a></h1>
<p class="Pp"><code class="Nm">rndtest</code> — <span class="Nd">FIPS
140-2 random number generator test monitor</span></p>
</section>
<section class="Sh">
<h1 class="Sh" id="SYNOPSIS"><a class="permalink" href="#SYNOPSIS">SYNOPSIS</a></h1>
<p class="Pp"><code class="Cd">device rndtest</code></p>
</section>
<section class="Sh">
<h1 class="Sh" id="DESCRIPTION"><a class="permalink" href="#DESCRIPTION">DESCRIPTION</a></h1>
<p class="Pp">The <code class="Nm">rndtest</code> driver “hooks
up” to hardware crypto devices to monitor the entropy data passed to
the <a class="Xr">random(4)</a> subsystem. This data is periodically tested
for FIPS 140-2 compliance and statistics are collected. If the harvested
entropy fails any of the FIPS test suite, then it is discarded and testing
is continuously applied until “good data” is received from the
device. Failures are optionally reported on the console.</p>
</section>
<section class="Sh">
<h1 class="Sh" id="SEE_ALSO"><a class="permalink" href="#SEE_ALSO">SEE
ALSO</a></h1>
<p class="Pp"><a class="Xr">crypto(4)</a>, <a class="Xr">random(4)</a>,
<a class="Xr">safe(4)</a>, <a class="Xr">crypto(9)</a></p>
</section>
<section class="Sh">
<h1 class="Sh" id="HISTORY"><a class="permalink" href="#HISTORY">HISTORY</a></h1>
<p class="Pp">The idea for this and the original code came from
<span class="An">Jason L. Wright</span>. The <code class="Nm">rndtest</code>
device driver first appeared in <span class="Ux">FreeBSD 5.0</span>.</p>
</section>
<section class="Sh">
<h1 class="Sh" id="BUGS"><a class="permalink" href="#BUGS">BUGS</a></h1>
<p class="Pp">Crypto device drivers must be compiled specially to make use of
this driver; this should not be necessary. This feature might better be
integrated into the <a class="Xr">random(4)</a> subsystem where it can be
applied to devices that claim to supply “pure entropy”.</p>
</section>
</div>
<table class="foot">
<tr>
<td class="foot-date">May 11, 2020</td>
<td class="foot-os">FreeBSD 15.0</td>
</tr>
</table>
|