summaryrefslogtreecommitdiff
path: root/static/freebsd/man4/rndtest.4 4.html
blob: 4ee2c10cb136f0ba04dfc3282b8cf8581c18c7f5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
<table class="head">
  <tr>
    <td class="head-ltitle">RNDTEST(4)</td>
    <td class="head-vol">Device Drivers Manual</td>
    <td class="head-rtitle">RNDTEST(4)</td>
  </tr>
</table>
<div class="manual-text">
<section class="Sh">
<h1 class="Sh" id="NAME"><a class="permalink" href="#NAME">NAME</a></h1>
<p class="Pp"><code class="Nm">rndtest</code> &#x2014; <span class="Nd">FIPS
    140-2 random number generator test monitor</span></p>
</section>
<section class="Sh">
<h1 class="Sh" id="SYNOPSIS"><a class="permalink" href="#SYNOPSIS">SYNOPSIS</a></h1>
<p class="Pp"><code class="Cd">device rndtest</code></p>
</section>
<section class="Sh">
<h1 class="Sh" id="DESCRIPTION"><a class="permalink" href="#DESCRIPTION">DESCRIPTION</a></h1>
<p class="Pp">The <code class="Nm">rndtest</code> driver &#x201C;hooks
    up&#x201D; to hardware crypto devices to monitor the entropy data passed to
    the <a class="Xr">random(4)</a> subsystem. This data is periodically tested
    for FIPS 140-2 compliance and statistics are collected. If the harvested
    entropy fails any of the FIPS test suite, then it is discarded and testing
    is continuously applied until &#x201C;good data&#x201D; is received from the
    device. Failures are optionally reported on the console.</p>
</section>
<section class="Sh">
<h1 class="Sh" id="SEE_ALSO"><a class="permalink" href="#SEE_ALSO">SEE
  ALSO</a></h1>
<p class="Pp"><a class="Xr">crypto(4)</a>, <a class="Xr">random(4)</a>,
    <a class="Xr">safe(4)</a>, <a class="Xr">crypto(9)</a></p>
</section>
<section class="Sh">
<h1 class="Sh" id="HISTORY"><a class="permalink" href="#HISTORY">HISTORY</a></h1>
<p class="Pp">The idea for this and the original code came from
    <span class="An">Jason L. Wright</span>. The <code class="Nm">rndtest</code>
    device driver first appeared in <span class="Ux">FreeBSD 5.0</span>.</p>
</section>
<section class="Sh">
<h1 class="Sh" id="BUGS"><a class="permalink" href="#BUGS">BUGS</a></h1>
<p class="Pp">Crypto device drivers must be compiled specially to make use of
    this driver; this should not be necessary. This feature might better be
    integrated into the <a class="Xr">random(4)</a> subsystem where it can be
    applied to devices that claim to supply &#x201C;pure entropy&#x201D;.</p>
</section>
</div>
<table class="foot">
  <tr>
    <td class="foot-date">May 11, 2020</td>
    <td class="foot-os">FreeBSD 15.0</td>
  </tr>
</table>