[Opendnssec-develop] hsmutil test implemented

Jakob Schlyter jakob at kirei.se
Tue Aug 25 09:56:42 UTC 2009


On 25 aug 2009, at 11.55, Roland van Rijswijk wrote:

> If you want to have really good, really nasty randomness test, have a
> look at diehard (http://en.wikipedia.org/wiki/Diehard_tests)

we're not testing random number quality, just that emits numbers as  
expected. the quality is checked as part of any certification process  
(e.g. FIPS 140-2).
I guess there are stuff talking PKCS#11 that does not provide any  
random numbers.

	jakob




More information about the Opendnssec-develop mailing list