]>
Commit | Line | Data |
---|---|---|
1 | /* prng */ | |
2 | ||
3 | /*? | |
4 | * Text: "prng runs in TDES mode with chunksize=%d and reseed_limit=%u\n" | |
5 | * Severity: Informational | |
6 | * Parameter: | |
7 | * @1: read chunk size in bytes | |
8 | * @2: reseed limit | |
9 | * Description: | |
10 | * The pseudo-random number device driver started in triple DES mode. | |
11 | * For IBM mainframes earlier than IBM zEnterprise EC12 (zEC12), | |
12 | * triple DES is the only available mode. | |
13 | * As of zEC12, the preferred mode is SHA-512. | |
14 | * User action: | |
15 | * If triple DES is the expected mode, no action is required. | |
16 | * Otherwise, verify that the prng started with the mode= module or | |
17 | * prng.mode= kernel parameter set to a value other than 1. | |
18 | * The value 1 forces triple DES mode. Also ensure that the mainframe | |
19 | * runs with the latest firmware level. | |
20 | */ | |
21 | ||
22 | /*? | |
23 | * Text: "The prng module stopped after running in triple DES mode\n" | |
24 | * Severity: Informational | |
25 | * Description: | |
26 | * The pseudo-random number device driver was running in triple DES mode. | |
27 | * The device driver module, prng, was unloaded, or it stopped | |
28 | * because Linux shut down. | |
29 | * User action: | |
30 | * None. | |
31 | */ | |
32 | ||
33 | /*? | |
34 | * Text: "The prng module cannot start in SHA-512 mode\n" | |
35 | * Severity: Error | |
36 | * Description: | |
37 | * The pseudo-random number device driver was loaded with the mode= module parameter | |
38 | * or the prng.mode= kernel parameter set to 2. This setting forces SHA-512 mode, | |
39 | * but the required support for MSA 5 is not available. This support requires an IBM | |
40 | * zEnterprise EC12 (zEC12) or later mainframe. | |
41 | * User action: | |
42 | * If your mainframe is earlier than zEC12, set the mode= module or | |
43 | * prng.mode= kernel parameter to 0 or 1 to run the | |
44 | * pseudo-random number device driver in triple DES mode. | |
45 | * Otherwise, ensure that MSA 5 support available. | |
46 | */ | |
47 | ||
48 | /*? | |
49 | * Text: "prng runs in SHA-512 mode with chunksize=%d and reseed_limit=%u\n" | |
50 | * Severity: Informational | |
51 | * Parameter: | |
52 | * @1: read chunk size in bytes | |
53 | * @2: reseed limit | |
54 | * Description: | |
55 | * The pseudo-random number device driver started in SHA-512 mode. | |
56 | * As of IBM zEnterprise EC12, this is the preferred mode. | |
57 | * User action: | |
58 | * None. | |
59 | */ | |
60 | ||
61 | /*? | |
62 | * Text: "The prng module stopped after running in SHA-512 mode\n" | |
63 | * Severity: Informational | |
64 | * Description: | |
65 | * The pseudo-random number device driver was running in SHA-512 mode. | |
66 | * The device driver module, prng, was unloaded, or stopped | |
67 | * because Linux shut down. | |
68 | * User action: | |
69 | * None. | |
70 | */ | |
71 | ||
72 | /*? | |
73 | * Text: "The prng self test state test for the SHA-512 mode failed\n" | |
74 | * Severity: Error | |
75 | * Description: | |
76 | * The pseudo-random number device driver is not operational because the self test failed. | |
77 | * After processing a published National Institute of Standards and Technology (NIST) test vector for the | |
78 | * Deterministic Random Bit Generator (DRBG) algorithm, the device driver | |
79 | * was not in the expected working state. This failure might indicate | |
80 | * that the cryptographic software or hardware is not working correctly. | |
81 | * The processed NIST test vector was: Hash Drbg, Sha-512, Count #0. | |
82 | * User action: | |
83 | * Unload and reload the prng module, or | |
84 | * if prng was compiled into the kernel, restart Linux. | |
85 | * If the error persists, contact your support organization. | |
86 | */ | |
87 | ||
88 | /*? | |
89 | * Text: "The prng self test data test for the SHA-512 mode failed\n" | |
90 | * Severity: Error | |
91 | * Description: | |
92 | * The pseudo-random number device driver is not operational because the self test failed. | |
93 | * After processing a published National Institute of Standards and Technology (NIST) test vector for the | |
94 | * Deterministic Random Bit Generator (DRBG) algorithm, the device driver | |
95 | * did not produce the expected pseudo-random data. This failure might indicate | |
96 | * that the cryptographic software or hardware is not working correctly. | |
97 | * The processed NIST test vector was: Hash Drbg, Sha-512, Count #0. | |
98 | * User action: | |
99 | * Unload and reload the prng module, or | |
100 | * if prng was compiled into the kernel, restart Linux. | |
101 | * If the error persists, contact your support organization. | |
102 | */ | |
103 | /*? Text: "%s: %d output lines suppressed due to ratelimiting\n" */ |