Provided by: freebsd-manpages_12.2-1_all bug


     rndtest — FIPS 140-2 random number generator test monitor


     device rndtest


     The rndtest driver “hooks up” to hardware crypto devices to monitor the entropy data passed
     to the random(4) subsystem.  This data is periodically tested for FIPS 140-2 compliance and
     statistics are collected.  If the harvested entropy fails any of the FIPS test suite, then
     it is discarded and testing is continuously applied until “good data” is received from the
     device.  Failures are optionally reported on the console.


     crypto(4), hifn(4), random(4), safe(4), ubsec(4), crypto(9)


     The idea for this and the original code came from Jason L. Wright.  The rndtest device
     driver first appeared in FreeBSD 5.0.


     Crypto device drivers must be compiled specially to make use of this driver; this should not
     be necessary.  This feature might better be integrated into the random(4) subsystem where it
     can be applied to devices that claim to supply “pure entropy”.