home | help
RNDTEST(4)		     Kernel Interfaces Manual		      RNDTEST(4)

NAME
     rndtest -- FIPS 140-2 random number generator test monitor

SYNOPSIS
     device rndtest

DESCRIPTION
     The rndtest driver "hooks up" to hardware crypto devices to monitor the en-
     tropy  data  passed  to the random(4) subsystem.  This data is periodically
     tested for FIPS 140-2 compliance and statistics are collected.  If the har-
     vested entropy fails any of the FIPS test suite, then it is  discarded  and
     testing  is continuously applied until "good data" is received from the de-
     vice.  Failures are optionally reported on the console.

SEE ALSO
     crypto(4), hifn(4), random(4), safe(4), crypto(9)

HISTORY
     The idea for this and the original code came from	Jason  L.  Wright.   The
     rndtest device driver first appeared in FreeBSD 5.0.

BUGS
     Crypto  device  drivers must be compiled specially to make use of this dri-
     ver; this should not be necessary.  This feature might better be integrated
     into the random(4) subsystem where it can be applied to devices that  claim
     to supply "pure entropy".

FreeBSD 15.1			  May 11, 2020			      RNDTEST(4)

home | help