FreeBSD manual
download PDF document: rndtest.4.pdf
RNDTEST(4) FreeBSD Kernel Interfaces Manual RNDTEST(4)
NAME
rndtest - FIPS 140-2 random number generator test monitor
SYNOPSIS
device rndtest
DESCRIPTION
The rndtest driver "hooks up" to hardware crypto devices to monitor the
entropy data passed to the random(4) subsystem. This data is
periodically tested for FIPS 140-2 compliance and statistics are
collected. If the harvested entropy fails any of the FIPS test suite,
then it is discarded and testing is continuously applied until "good
data" is received from the device. Failures are optionally reported on
the console.
SEE ALSO
crypto(4), hifn(4), random(4), safe(4), crypto(9)
HISTORY
The idea for this and the original code came from Jason L. Wright. The
rndtest device driver first appeared in FreeBSD 5.0.
BUGS
Crypto device drivers must be compiled specially to make use of this
driver; this should not be necessary. This feature might better be
integrated into the random(4) subsystem where it can be applied to
devices that claim to supply "pure entropy".
FreeBSD 14.0-RELEASE-p11 May 11, 2020 FreeBSD 14.0-RELEASE-p11