hifn errors on console

[Sam Leffler]

Eric W. Bates wrote:
> I'm running pfsense (an embedded FreeBSD 6.1) on a wrap2C.  I recently
> added a Soekris vpn1411 and am now getting infrequent errors:
> 
> hifn0: rndtest: ones interval 4 failed (382, 251-373)
> hifn0: rndtest: ones interval 1 failed (2663, 2343-2657)
> hifn0: rndtest: zeros interval 5 failed (206, 111-201)
> hifn0: rndtest: ones interval 2 failed (1385, 1135-1365)
> hifn0: rndtest: zeros interval 3 failed (718, 542-708)
> hifn0: rndtest: zeros interval 4 failed (243, 251-373)
> hifn0: rndtest: zeros interval 3 failed (717, 542-708)
> 
> IPSec works fine.  However, I do not know how to tell whether the hifn
> is being used.
> 
> I had no luck with Google.  Can anyone enlighten me?

man rndtest(4).  pfSense has configured the FIPS rng testing module to 
monitor the entropy sent by the h/w to the system prng.  Looks like

sysctl kern.rdntest.verbose=0

will turn off console msgs.

	Sam