user/sven/linux.git/include/linux/fips.h, branch v4.9.6Linux Kernel
https://git.stealer.net/cgit.cgi/user/sven/linux.git/atom?h=v4.9.62009-06-18T11:50:21Zrandom: Add optional continuous repetition test to entropy store based rngs2009-06-18T11:50:21ZNeil Hormannhorman@tuxdriver.com2009-06-18T11:50:21Zurn:sha1:5b739ef8a4e8cf5201d21abff897e292c232477b
FIPS-140 requires that all random number generators implement continuous self
tests in which each extracted block of data is compared against the last block
for repetition. The ansi_cprng implements such a test, but it would be nice if
the hw rng's did the same thing. Obviously its not something thats always
needed, but it seems like it would be a nice feature to have on occasion. I've
written the below patch which allows individual entropy stores to be flagged as
desiring a continuous test to be run on them as is extracted. By default this
option is off, but is enabled in the event that fips mode is selected during
bootup.
Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
Acked-by: Matt Mackall <mpm@selenic.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>