rndtest(4) [debian man page]

RNDTEST(4)						   BSD Kernel Interfaces Manual 						RNDTEST(4)

NAME

     rndtest -- FIPS 140-2 random number generator test monitor

SYNOPSIS

     device rndtest

DESCRIPTION

     The rndtest driver ``hooks up'' to hardware crypto devices to monitor the entropy data passed to the random(4) subsystem.	This data is peri-
     odically tested for FIPS 140-2 compliance and statistics are collected.  If the harvested entropy fails any of the FIPS test suite, then it
     is discarded and testing is continuously applied until ``good data'' is received from the device.	Failures are optionally reported on the
     console.

SEE ALSO

     crypto(4), hifn(4), random(4), safe(4), ubsec(4), crypto(9)

HISTORY

     The idea for this and the original code came from Jason L. Wright.  The rndtest device driver first appeared in FreeBSD 5.0.

BUGS

     Crypto device drivers must be compiled specially to make use of this driver; this should not be necessary.  This feature might better be
     integrated into the random(4) subsystem where it can be applied to devices that claim to supply ``pure entropy''.

BSD
								  March 11, 2003							       BSD

CRYPTO(4)						   BSD Kernel Interfaces Manual 						 CRYPTO(4)

NAME

     crypto, cryptodev -- hardware crypto access driver

SYNOPSIS

     device crypto
     device cryptodev

DESCRIPTION

     The crypto driver provides a device-independent framework to support cryptographic operations in the kernel.  The cryptodev driver provides
     userland applications access to this support through the /dev/crypto device.  This node primarily operates in an ioctl(2) based model, per-
     mitting a variety of applications to query device capabilities, submit transactions, and get results.

     If count given in the specification, and is greater than 0, a maximum of one crypto device is created.

     The following ioctl(2) calls apply only to the crypto devices:

     CIOCGSESSION  Setup a new crypto session for a new type of operation.

     CIOCFSESSION  Free a previously established session.

     CIOCCRYPT	   Perform a crypto operation against a previously setup session.

FEATURES

     Depending on hardware being present, the following symmetric and asymmetric cryptographic features are potentially available from
     /dev/crypto:

	   CRYPTO_DES_CBC
	   CRYPTO_3DES_CBC
	   CRYPTO_BLF_CBC
	   CRYPTO_CAMELLIA_CBC
	   CRYPTO_CAST_CBC
	   CRYPTO_SKIPJACK_CBC
	   CRYPTO_MD5_HMAC
	   CRYPTO_SHA1_HMAC
	   CRYPTO_RIPEMD160_HMAC
	   CRYPTO_MD5_KPDK
	   CRYPTO_SHA1_KPDK
	   CRYPTO_AES_CBC
	   CRYPTO_ARC4
	   CRYPTO_MD5
	   CRYPTO_SHA1
	   CRK_MOD_EXP
	   CRK_MOD_EXP_CRT
	   CRK_DSA_SIGN
	   CRK_DSA_VERIFY
	   CRK_DH_COMPUTE_KEY

FILES

     /dev/crypto  crypto access device

SEE ALSO

     aesni(4), glxsb(4), hifn(4), ipsec(4), padlock(4), safe(4), ubsec(4), geli(8), crypto(9)

HISTORY

     The crypto driver first appeared in OpenBSD 3.0.  The crypto driver was imported to FreeBSD 5.0.

BSD
								 September 7, 2010							       BSD