Third submission, based on feedback from mpi@ and deraadt@.
* rename device to "uonerng"
* don't discard initial bytes from the device
* decrease buffer size to 128 and poll interval to 100ms
* feed the first buffer of data to the RNG as soon as the device is
attached, before putting the task in the queue
* avoid DMA copy on read
* write device commands in-line, and remove onerng_write()
* addressed remaining aforementioned nits
Tested on:
5.8 stable on i386/GENERIC; and
5.9 beta snapshot (27 Dec 2015) on amd64/GENERIC.MP
Index: sys/arch/amd64/conf/GENERIC
===================================================================
RCS file: /cvs/src/sys/arch/amd64/conf/GENERIC,v
retrieving revision 1.407
diff -u -p -r1.407 GENERIC
--- sys/arch/amd64/conf/GENERIC 7 Jan 2016 11:13:19 -0000 1.407
+++ sys/arch/amd64/conf/GENERIC 8 Jan 2016 02:55:13 -0000
@@ -184,6 +184,7 @@ usb* at ohci?
uhub* at usb? # USB Hubs
uhub* at uhub? # USB Hubs
ualea* at uhub? # Araneus Alea II TRNG
+uonerng* at uhub? # Moonbase Otago OneRNG
umodem* at uhub? # USB Modems/Serial
ucom* at umodem?
uvisor* at uhub? # Handspring Visor
Index: sys/arch/i386/conf/GENERIC
===================================================================
RCS file: /cvs/src/sys/arch/i386/conf/GENERIC,v
retrieving revision 1.809
diff -u -p -r1.809 GENERIC
--- sys/arch/i386/conf/GENERIC 3 Jan 2016 05:50:00 -0000 1.809
+++ sys/arch/i386/conf/GENERIC 8 Jan 2016 02:55:25 -0000
@@ -233,6 +233,7 @@ usb* at ohci?
uhub* at usb? # USB Hubs
uhub* at uhub? # USB Hubs
ualea* at uhub? # Araneus Alea II TRNG
+uonerng* at uhub? # Moonbase Otago OneRNG
umodem* at uhub? # USB Modems/Serial
ucom* at umodem?
uvisor* at uhub? # Handspring Visor
Index: sys/dev/usb/files.usb
===================================================================
RCS file: /cvs/src/sys/dev/usb/files.usb,v
retrieving revision 1.124
diff -u -p -r1.124 files.usb
--- sys/dev/usb/files.usb 11 May 2015 06:46:22 -0000 1.124
+++ sys/dev/usb/files.usb 8 Jan 2016 02:56:08 -0000
@@ -175,6 +175,11 @@ device ualea
attach ualea at uhub
file dev/usb/ualea.c ualea
+# Moonbase Otago OneRNG TRNG
+device uonerng
+attach uonerng at uhub
+file dev/usb/uonerng.c uonerng
+
# Gude Expert mouseCLOCK DCF77 time signal station receiver
device udcf
attach udcf at uhub
Index: sys/dev/usb/uonerng.c
===================================================================
RCS file: sys/dev/usb/uonerng.c
diff -N sys/dev/usb/uonerng.c
--- /dev/null 1 Jan 1970 00:00:00 -0000
+++ sys/dev/usb/uonerng.c 8 Jan 2016 02:56:08 -0000
@@ -0,0 +1,452 @@
+/* $OpenBSD$ */
+/*
+ * Copyright (C) 2015 Devin Reade <[email protected]>
+ * Copyright (C) 2015 Sean Levy <[email protected]>
+ * Copyright (c) 2007 Marc Balmer <[email protected]>
+ * Copyright (c) 2006 Alexander Yurchenko <[email protected]>
+ * Copyright (c) 1998 The NetBSD Foundation, Inc.
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+/*
+ * Moonbase Otago OneRNG TRNG. Note that the encoded vendor for this
+ * device is OpenMoko as OpenMoko has made its device ranges available
+ * for other open source / open hardware vendors.
+ *
+ * Product information can be found here:
+ * http://onerng.info/onerng
+ *
+ * Based on the ualea(4), uow(4), and umodem(4) source code.
+ */
+
+#include <sys/param.h>
+#include <sys/systm.h>
+#include <sys/device.h>
+#include <sys/time.h>
+#include <sys/timeout.h>
+#include <machine/bus.h>
+
+#include <dev/usb/usb.h>
+#include <dev/usb/usbdi.h>
+#include <dev/usb/usbdivar.h>
+#include <dev/usb/usbdi_util.h>
+#include <dev/usb/usbdevs.h>
+#include <dev/usb/usbcdc.h>
+
+#include <dev/rndvar.h>
+
+/*
+ * The OneRNG is documented to provide ~350kbits/s of entropy at
+ * ~7.8 bits/byte, and when used at a lower rate providing close
+ * to 8 bits/byte.
+ *
+ * Although this driver is able to consume the data at the full rate,
+ * we tune this down to 10kbit/s as the OpenBSD RNG is better off
+ * with small amounts of input at a time so as to not saturate the
+ * input queue and mute other sources of entropy.
+ *
+ * Furthermore, unlike other implementations, for us there is no benefit
+ * to discarding the initial bytes retrieved from the OneRNG, regardless
+ * of the quality of the data. (Empirical tests suggest that the initial
+ * quality is fine, anyway.)
+ */
+#define ONERNG_BUFSIZ 128
+#define ONERNG_MSECS 100
+
+#define ONERNG_TIMEOUT 1000 /* ms */
+
+/*
+ * Define ONERNG_MEASURE_RATE to periodically log rate at which we provide
+ * random data to the kernel.
+ */
+#ifdef ONERNG_MEASURE_RATE
+#define ONERNG_RATE_SECONDS 30
+#endif
+
+/* OneRNG operational modes */
+#define ONERNG_OP_ENABLE "cmdO\n" /* start emitting data */
+#define ONERNG_OP_DISABLE "cmdo\n" /* stop emitting data */
+#define ONERNG_OP_FLUSH_ENTROPY "cmdw\n"
+
+/* permits extracting the firmware in order to check the crypto signature */
+#define ONERNG_OP_EXTRACT_FIRMWARE "cmdX\n"
+
+/*
+ * Noise sources include an avalache circuit and an RF circuit.
+ * There is also a whitener to provide a uniform distribution.
+ * Different combinations are possible.
+ */
+#define ONERNG_AVALANCHE_WHITENER "cmd0\n" /* device default */
+#define ONERNG_AVALANCHE "cmd1\n"
+#define ONERNG_AVALANCHE_RF_WHITENER "cmd2\n"
+#define ONERNG_AVALANCHE_RF "cmd3\n"
+#define ONERNG_SILENT "cmd4\n" /* none; necessary for cmdX */
+#define ONERNG_SILENT2 "cmd5\n"
+#define ONERNG_RF_WHITENER "cmd6\n"
+#define ONERNG_RF "cmd7\n"
+
+
+#define ONERNG_CONFIG_INDEX 0
+#define ONERNG_IFACE_CTRL_INDEX 0
+#define ONERNG_IFACE_DATA_INDEX 1
+
+#define DEVNAME(_sc) ((_sc)->sc_dev.dv_xname)
+
+struct uonerng_softc {
+ struct device sc_dev;
+ struct usbd_device *sc_udev;
+
+ int sc_ctl_iface_no; /* control */
+ struct usbd_interface *sc_data_iface; /* data */
+
+ struct usbd_pipe *sc_inpipe;
+ struct usbd_pipe *sc_outpipe;
+
+ struct timeout sc_timeout;
+ struct usb_task sc_task;
+ struct usbd_xfer *sc_xfer;
+ int *sc_buf;
+#ifdef ONERNG_MEASURE_RATE
+ struct timeval sc_start;
+ struct timeval sc_cur;
+ int sc_counted_bytes;
+#endif
+ u_char sc_dtr; /* current DTR state */
+ u_char sc_rts; /* current RTS state */
+ u_char sc_first_run;
+};
+
+int uonerng_match(struct device *, void *, void *);
+void uonerng_attach(struct device *, struct device *, void *);
+int uonerng_detach(struct device *, int);
+void uonerng_task(void *);
+void uonerng_timeout(void *);
+int uonerng_enable(struct uonerng_softc *sc);
+void uonerng_cleanup(struct uonerng_softc *sc);
+usbd_status uonerng_set_line_state(struct uonerng_softc *sc);
+usbd_status uonerng_rts(struct uonerng_softc *sc, int onoff);
+
+struct cfdriver uonerng_cd = {
+ NULL, "uonerng", DV_DULL
+};
+
+const struct cfattach uonerng_ca = {
+ sizeof(struct uonerng_softc), uonerng_match, uonerng_attach,
uonerng_detach
+};
+
+int
+uonerng_match(struct device *parent, void *match, void *aux)
+{
+ struct usb_attach_arg *uaa = aux;
+
+ if (uaa->iface != NULL)
+ return UMATCH_NONE;
+
+ if (uaa->vendor != USB_VENDOR_OPENMOKO2 ||
+ uaa->product != USB_PRODUCT_OPENMOKO2_ONERNG)
+ return UMATCH_NONE;
+
+ return UMATCH_VENDOR_PRODUCT;
+}
+
+void
+uonerng_attach(struct device *parent, struct device *self, void *aux)
+{
+ struct uonerng_softc *sc = (struct uonerng_softc *)self;
+ struct usb_attach_arg *uaa = aux;
+ struct usbd_interface *iface = uaa->iface;
+ usb_interface_descriptor_t *id;
+ usb_endpoint_descriptor_t *ed;
+ int ep_ibulk = -1, ep_obulk = -1;
+ usbd_status err;
+ int i;
+
+ sc->sc_udev = uaa->device;
+ sc->sc_dtr = -1;
+ sc->sc_rts = -1;
+ sc->sc_first_run = 1;
+
+ usb_init_task(&sc->sc_task, uonerng_task, sc, USB_TASK_TYPE_GENERIC);
+
+ err = usbd_set_config_index(sc->sc_udev, ONERNG_CONFIG_INDEX, 1);
+ if (err) {
+ printf("%s: failed to set configuration, err=%s\n",
+ DEVNAME(sc), usbd_errstr(err));
+ goto fail;
+ }
+
+ /* locate the control interface number and the data interface */
+ err = usbd_device2interface_handle(sc->sc_udev,
+ ONERNG_IFACE_CTRL_INDEX, &iface);
+ if (err || iface == NULL) {
+ printf("%s: failed to locate control interface, err=%s\n",
+ DEVNAME(sc), usbd_errstr(err));
+ goto fail;
+ }
+ id = usbd_get_interface_descriptor(iface);
+ if (id != NULL &&
+ id->bInterfaceClass == UICLASS_CDC &&
+ id->bInterfaceSubClass == UISUBCLASS_ABSTRACT_CONTROL_MODEL &&
+ id->bInterfaceProtocol == UIPROTO_CDC_AT) {
+ sc->sc_ctl_iface_no = id->bInterfaceNumber;
+ } else {
+ printf("%s: control interface number not found\n",
+ DEVNAME(sc));
+ goto fail;
+ }
+
+ err = usbd_device2interface_handle(sc->sc_udev,
+ ONERNG_IFACE_DATA_INDEX, &sc->sc_data_iface);
+ if (err || sc->sc_data_iface == NULL) {
+ printf("%s: failed to locate data interface, err=%s\n",
+ DEVNAME(sc), usbd_errstr(err));
+ goto fail;
+ }
+
+ /* Find the bulk endpoints */
+ id = usbd_get_interface_descriptor(sc->sc_data_iface);
+ if (id == NULL ||
+ id->bInterfaceClass != UICLASS_CDC_DATA ||
+ id->bInterfaceSubClass != UISUBCLASS_DATA) {
+ printf("%s: no data interface descriptor\n", DEVNAME(sc));
+ goto fail;
+ }
+ for (i = 0; i < id->bNumEndpoints; i++) {
+ ed = usbd_interface2endpoint_descriptor(sc->sc_data_iface, i);
+ if (ed == NULL) {
+ printf("%s: no endpoint descriptor for %d\n",
+ DEVNAME(sc), i);
+ goto fail;
+ }
+ if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
+ (ed->bmAttributes & UE_XFERTYPE) == UE_BULK) {
+ ep_ibulk = ed->bEndpointAddress;
+ } else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT &&
+ (ed->bmAttributes & UE_XFERTYPE) == UE_BULK) {
+ ep_obulk = ed->bEndpointAddress;
+ }
+ }
+
+ if (ep_ibulk == -1) {
+ printf("%s: Could not find data bulk in\n", DEVNAME(sc));
+ goto fail;
+ }
+ if (ep_obulk == -1) {
+ printf("%s: Could not find data bulk out\n", DEVNAME(sc));
+ goto fail;
+ }
+
+ /* Open pipes */
+ err = usbd_open_pipe(sc->sc_data_iface, ep_ibulk,
+ USBD_EXCLUSIVE_USE, &sc->sc_inpipe);
+ if (err) {
+ printf("%s: failed to open bulk-in pipe: %s\n",
+ DEVNAME(sc), usbd_errstr(err));
+ goto fail;
+ }
+ err = usbd_open_pipe(sc->sc_data_iface, ep_obulk,
+ USBD_EXCLUSIVE_USE, &sc->sc_outpipe);
+ if (err) {
+ printf("%s: failed to open bulk-out pipe: %s\n",
+ DEVNAME(sc), usbd_errstr(err));
+ goto fail;
+ }
+
+ /* Allocate xfer/buffer for bulk transfers */
+ sc->sc_xfer = usbd_alloc_xfer(sc->sc_udev);
+ if (sc->sc_xfer == NULL) {
+ printf("%s: could not alloc xfer\n", DEVNAME(sc));
+ goto fail;
+ }
+ sc->sc_buf = usbd_alloc_buffer(sc->sc_xfer, ONERNG_BUFSIZ);
+ if (sc->sc_buf == NULL) {
+ printf("%s: could not alloc %d-byte buffer\n", DEVNAME(sc),
+ ONERNG_BUFSIZ);
+ goto fail;
+ }
+
+ if (uonerng_enable(sc) != 0) {
+ goto fail;
+ }
+
+ timeout_set(&sc->sc_timeout, uonerng_timeout, sc);
+
+ /* get the initial random data as early as possible */
+ uonerng_task(sc);
+
+ usb_add_task(sc->sc_udev, &sc->sc_task);
+ return;
+
+ fail:
+ usbd_deactivate(sc->sc_udev);
+ uonerng_cleanup(sc);
+}
+
+int
+uonerng_enable(struct uonerng_softc *sc)
+{
+ int err;
+
+ if ((err = uonerng_rts(sc, 0))) {
+ printf("%s: failed to clear RTS: %s\n", DEVNAME(sc),
+ usbd_errstr(err));
+ return (1);
+ }
+
+ usbd_setup_xfer(sc->sc_xfer, sc->sc_outpipe, sc,
+ ONERNG_AVALANCHE_WHITENER, sizeof(ONERNG_AVALANCHE_WHITENER),
+ USBD_SYNCHRONOUS, ONERNG_TIMEOUT, NULL);
+ if ((err = usbd_transfer(sc->sc_xfer))) {
+ printf("%s: failed to set operating mode: %s\n",
+ DEVNAME(sc), usbd_errstr(err));
+ return (1);
+ }
+
+ usbd_setup_xfer(sc->sc_xfer, sc->sc_outpipe, sc,
+ ONERNG_OP_ENABLE, sizeof(ONERNG_OP_ENABLE),
+ USBD_SYNCHRONOUS, ONERNG_TIMEOUT, NULL);
+ if ((err = usbd_transfer(sc->sc_xfer))) {
+ printf("%s: failed to enable device: %s\n",
+ DEVNAME(sc), usbd_errstr(err));
+ return (1);
+ }
+
+ return (0);
+}
+
+int
+uonerng_detach(struct device *self, int flags)
+{
+ struct uonerng_softc *sc = (struct uonerng_softc *)self;
+
+ usb_rem_task(sc->sc_udev, &sc->sc_task);
+ if (timeout_initialized(&sc->sc_timeout)) {
+ timeout_del(&sc->sc_timeout);
+ }
+ uonerng_cleanup(sc);
+ return (0);
+}
+
+void
+uonerng_cleanup(struct uonerng_softc *sc)
+{
+ if (sc->sc_inpipe != NULL) {
+ usbd_close_pipe(sc->sc_inpipe);
+ sc->sc_inpipe = NULL;
+ }
+ if (sc->sc_outpipe != NULL) {
+ usbd_close_pipe(sc->sc_outpipe);
+ sc->sc_outpipe = NULL;
+ }
+
+ /* usbd_free_xfer will also free the buffer if necessary */
+ if (sc->sc_xfer != NULL) {
+ usbd_free_xfer(sc->sc_xfer);
+ sc->sc_xfer = NULL;
+ }
+}
+
+usbd_status
+uonerng_rts(struct uonerng_softc *sc, int onoff)
+{
+ if (sc->sc_rts == onoff)
+ return USBD_NORMAL_COMPLETION;
+ sc->sc_rts = onoff;
+
+ return uonerng_set_line_state(sc);
+}
+
+usbd_status
+uonerng_set_line_state(struct uonerng_softc *sc)
+{
+ usb_device_request_t req;
+ int ls;
+
+ ls = (sc->sc_dtr ? UCDC_LINE_DTR : 0) |
+ (sc->sc_rts ? UCDC_LINE_RTS : 0);
+ req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
+ req.bRequest = UCDC_SET_CONTROL_LINE_STATE;
+ USETW(req.wValue, ls);
+ USETW(req.wIndex, sc->sc_ctl_iface_no);
+ USETW(req.wLength, 0);
+
+ return usbd_do_request(sc->sc_udev, &req, 0);
+}
+
+void
+uonerng_task(void *arg)
+{
+ struct uonerng_softc *sc = (struct uonerng_softc *) arg;
+ usbd_status error;
+ u_int32_t len, int_count, i;
+#ifdef ONERNG_MEASURE_RATE
+ time_t elapsed;
+ int rate;
+#endif
+
+ usbd_setup_xfer(sc->sc_xfer, sc->sc_inpipe, NULL, sc->sc_buf,
+ ONERNG_BUFSIZ,
+ USBD_SHORT_XFER_OK | USBD_SYNCHRONOUS | USBD_NO_COPY,
+ ONERNG_TIMEOUT, NULL);
+ error = usbd_transfer(sc->sc_xfer);
+ if (error) {
+ printf("%s: xfer failed: %s\n", DEVNAME(sc),
+ usbd_errstr(error));
+ goto bail;
+ }
+ usbd_get_xfer_status(sc->sc_xfer, NULL, NULL, &len, NULL);
+ if (len < sizeof(int)) {
+ printf("%s: xfer too short (%u bytes) - dropping\n",
+ DEVNAME(sc), len);
+ goto bail;
+ }
+
+#ifdef ONERNG_MEASURE_RATE
+ if (sc->sc_first_run) {
+ sc->sc_counted_bytes = 0;
+ getmicrotime(&(sc->sc_start));
+ }
+ sc->sc_counted_bytes += len;
+ getmicrotime(&(sc->sc_cur));
+ elapsed = sc->sc_cur.tv_sec - sc->sc_start.tv_sec;
+ if (elapsed >= ONERNG_RATE_SECONDS) {
+ rate = (8 * sc->sc_counted_bytes) / (elapsed * 1024);
+ printf("%s: transfer rate = %d kb/s\n", DEVNAME(sc), rate);
+
+ /* set up for next measurement */
+ sc->sc_counted_bytes = 0;
+ getmicrotime(&(sc->sc_start));
+ }
+#endif
+
+ int_count = len / sizeof(int);
+ for (i = 0; i < int_count; i++) {
+ add_true_randomness(sc->sc_buf[i]);
+ }
+bail:
+
+ if (sc->sc_first_run) {
+ sc->sc_first_run = 0;
+ } else {
+ timeout_add_msec(&sc->sc_timeout, ONERNG_MSECS);
+ }
+}
+
+void
+uonerng_timeout(void *arg)
+{
+ struct uonerng_softc *sc = arg;
+
+ usb_add_task(sc->sc_udev, &sc->sc_task);
+}
Index: sys/dev/usb/usbdevs
===================================================================
RCS file: /cvs/src/sys/dev/usb/usbdevs,v
retrieving revision 1.661
diff -u -p -r1.661 usbdevs
--- sys/dev/usb/usbdevs 27 Nov 2015 10:58:05 -0000 1.661
+++ sys/dev/usb/usbdevs 8 Jan 2016 02:56:08 -0000
@@ -602,6 +602,7 @@ vendor LONGCHEER 0x1c9e Longcheer Techno
vendor DRESDENELEC 0x1cf1 Dresden Elektronic
vendor DREAMLINK 0x1d34 Dream Link
vendor PEGATRON 0x1d4d Pegatron
+vendor OPENMOKO2 0x1d50 OpenMoko
vendor SELUXIT 0x1d6f Seluxit
vendor METAGEEK 0x1dd5 MetaGeek
vendor FESTO 0x1e29 Festo
@@ -3246,6 +3247,12 @@ product OQO WIFI01 0x0002 model 01 WiFi
product OQO BT01 0x0003 model 01 Bluetooth
product OQO ETHER01PLUS 0x7720 model 01+ Ethernet
product OQO ETHER01 0x8150 model 01 Ethernet
+
+/*
+ * OpenMoko permits other open hardware products to use their
+ * product ID allocations
+ */
+product OPENMOKO2 ONERNG 0x6086 Moonbase Otago OneRNG
/* Oregon Scientific */
product OREGONSCI OWL_CM160 0xca05 OWL CM-160
Index: share/man/man4/Makefile
===================================================================
RCS file: /cvs/src/share/man/man4/Makefile,v
retrieving revision 1.611
diff -u -p -r1.611 Makefile
--- share/man/man4/Makefile 7 Jan 2016 11:31:12 -0000 1.611
+++ share/man/man4/Makefile 8 Jan 2016 02:56:19 -0000
@@ -61,7 +61,7 @@ MAN= aac.4 ac97.4 acphy.4 \
uftdi.4 ugen.4 ugl.4 ugold.4 uguru.4 uhci.4 uhid.4 uhidev.4 uipaq.4 \
uk.4 ukbd.4 \
ukphy.4 ulpt.4 umass.4 umbg.4 umcs.4 umct.4 umidi.4 umodem.4 ums.4 \
- umsm.4 unix.4 uow.4 uoaklux.4 uoakrh.4 uoakv.4 upd.4 \
+ umsm.4 unix.4 uonerng.4 uow.4 uoaklux.4 uoakrh.4 uoakv.4 upd.4 \
upgt.4 upl.4 uplcom.4 ural.4 url.4 urlphy.4 \
urndis.4 urtw.4 urtwn.4 usb.4 usbf.4 uscom.4 uslcom.4 usps.4 \
uthum.4 uticom.4 utpms.4 utwitch.4 utrh.4 uts.4 uvideo.4 uvisor.4 \
Index: share/man/man4/uonerng.4
===================================================================
RCS file: share/man/man4/uonerng.4
diff -N share/man/man4/uonerng.4
--- /dev/null 1 Jan 1970 00:00:00 -0000
+++ share/man/man4/uonerng.4 8 Jan 2016 02:56:19 -0000
@@ -0,0 +1,75 @@
+.\" $OpenBSD$
+.\"
+.\" Copyright (c) 2015 Devin Reade <[email protected]>
+.\"
+.\" Permission to use, copy, modify, and distribute this software for any
+.\" purpose with or without fee is hereby granted, provided that the above
+.\" copyright notice and this permission notice appear in all copies.
+.\"
+.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+.\"
+.Dd $Mdocdate: January 7 2016 $
+.Dt ONERNG 4
+.Os
+.Sh NAME
+.Nm uonerng
+.Nd Moonbase Otago OneRNG TRNG
+.Sh SYNOPSIS
+.Cd "uonerng* at uhub?"
+.Sh DESCRIPTION
+The
+.Nm
+driver provides support for the Moonbase Otago OneRNG, a USB true random
+number generator (TRNG).
+.Nm
+reads raw entropy from the OneRNG and uses
+.Xr add_true_randomness 9
+to add it to the system entropy pool.
+.Sh IMPLEMENTATION NOTES
+The OneRNG is capable of operating in one of several modes, some of
+which are intended for production use and some of which are for testing
+and validating the hardware.
+.Pp
+.Nm
+operates in the
+.Do
+Avalanche noise with whitener
+.Dc
+mode, which is also the manufacturer
+.Ap s
+default mode.
+.Sh SEE ALSO
+.Xr intro 4 ,
+.Xr usb 4 ,
+.Xr add_true_randomness 9
+.Pp
+Moonbase Otago:
+.Lk http://onerng.info/onerng
+.Sh HISTORY
+The
+.Nm
+driver first appeared in
+.Ox 5.9 .
+.Sh AUTHORS
+The
+.Nm
+driver was written by
+.An Devin Reade Aq Mt [email protected] .
+.Sh BUGS
+The OneRNG permits downloading the device firmware so that one may check
+the firmware
+.Ap s
+cryptographic signature as provided by the manufacturer. The
+.Nm
+driver does not perform nor support this action. In order to currently
+perform such a validation, it would be necessary to disable
+.Nm
+in the kernel and then download the firmware via the OneRNG
+.Ap s
+emulated AT modem command set.
Index: share/man/man4/usb.4
===================================================================
RCS file: /cvs/src/share/man/man4/usb.4,v
retrieving revision 1.170
diff -u -p -r1.170 usb.4
--- share/man/man4/usb.4 21 Nov 2015 08:04:20 -0000 1.170
+++ share/man/man4/usb.4 8 Jan 2016 02:56:19 -0000
@@ -286,6 +286,8 @@ USB generic device support
Genesys Logic based host-to-host adapters
.It Xr ugold 4
TEMPer gold HID thermometer and hygrometer
+.It Xr uonerng 4
+Moonbase Otago OneRNG TRNG
.It Xr uow 4
Maxim/Dallas DS2490 USB 1-Wire adapter
.It Xr upl 4
