KCAPI-RNG(1) | General Commands Manual | KCAPI-RNG(1) |
kcapi-rng - Kernel Crypto API Random Number Gatherer
kcapi-rng [OPTION]
The kcapi-rng application provides tool to obtain random numbers from the Linux kernel crypto API via the command line. The tool is similar to reading /dev/hwrand with the difference that the used random number generators are fully deterministic - i.e. they are DRNGs.
Any potential seed data can be provided via STDIN. Some of the DRNGs require seeding as they do not seed themselves. The kcapi-rng tool ensures that the DRNGs are seeded by pulling the seed data from the getrandom system call (or /dev/urandom if getrandom is not available). The amount of seed data is defined by the DRNG itself and can be reviewed by assessing /proc/crypto. The seed provided via STDIN will be added to the internally-generated seed. The generated random numbers are written to STDOUT.
The following options are supported when invoking kcapi-rng:
2017-08-14 |