tree 1d8a0ad1461e7b38598900e26f0ba7c20770f9aa
parent 9b1a3bbbdf7da77cf84e2eaafb55260d357ae3de
author H. Peter Anvin <hpa@linux.intel.com> 1343856699 -0700
committer Jeff Garzik <jgarzik@redhat.com> 1343881141 -0400

rngd: Allow up to a 1:1000 false error rate on FIPS tests

The FIPS tests have a measured false positive error rate of
approximately 1:1250.  In order to not permanently disable a
functioning random number source under high traffic, allow
one failure per 1000 successful blocks.

However, never allow more than 25 subsequent failures; this is
handled by not allowing the failures counter to go below zero.

Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
Signed-off-by: Jeff Garzik <jgarzik@redhat.com>