rndtest(4)

rndtest4

Fips 140-2 random number generator test monitor

Usage

device rndtest

Overview

The rndtest driver “hooks up” to hardware crypto devices to monitor the entropy data passed to the random(4) subsystem. This data is periodically tested for FIPS 140-2 compliance and statistics are collected. If the harvested entropy fails any of the FIPS test suite, then it is discarded and testing is continuously applied until “good data” is received from the device. Failures are optionally reported on the console.

Releases

58 releases since FreeBSD 4.9-RELEASE; the text changed 36 times.

  1. 4.9
  2. 4.10–4.11
  3. 5.1–5.2.1
  4. 5.3–6.3
  5. 6.4
  6. 7.0
  7. 7.1
  8. 7.2
  9. 7.3
  10. 7.4
  11. 8.0
  12. 8.1
  13. 8.2
  14. 8.3
  15. 8.4
  16. 9.0
  17. 9.1
  18. 9.2
  19. 9.3
  20. 10.0
  21. 10.1
  22. 10.2
  23. 10.3
  24. 10.4
  25. 11.0
  26. 11.1
  27. 11.2
  28. 11.3
  29. 11.4
  30. 12.0
  31. 12.1
  32. 12.2
  33. 12.3
  34. 12.4
  35. 13.0–13.2
  36. 13.3–15.1
  37. 16.0

History

The idea for this and the original code came from Jason L. Wright. The rndtest device driver first appeared in FreeBSD 5.0.

Bugs

Crypto device drivers must be compiled specially to make use of this driver; this should not be necessary. This feature might better be integrated into the random(4) subsystem where it can be applied to devices that claim to supply “pure entropy”.

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.