NAME    [Toc]    [Back]

     rndtest -- FIPS 140-2 random number generator test monitor

SYNOPSIS    [Toc]    [Back]

     device rndtest

DESCRIPTION    [Toc]    [Back]

     The rndtest driver ``hooks up'' to hardware crypto devices to monitor the
     entropy data passed to the random(4) subsystem.  This data is periodically
 tested for FIPS 140-2 compliance and statistics are collected.  If
     the harvested entropy fails any of the FIPS test suite, then it is discarded
 and testing is continuously applied until ``good data'' is
     received from the device.	Failures are optionally reported on the console.

SEE ALSO    [Toc]    [Back]

     crypto(4), hifn(4), random(4), ubsec(4), crypto(9)

HISTORY    [Toc]    [Back]

     The idea for this and the original code came from Jason L. Wright.  The
     rndtest device driver first appeared in FreeBSD 5.0.

BUGS    [Toc]    [Back]

     Crypto device drivers must be compiled specially to make use of this
     driver; this should not be necessary.  This feature might better be integrated
 into the random(4) subsystem where it can be used applied to
     devices that claim to supply ``pure entropy''.


FreeBSD 5.2.1			March 11, 2003			 FreeBSD 5.2.1