Page MenuHomeFreeBSD

random: remove hifn(4)
ClosedPublic

Authored by obrien on Oct 18 2025, 3:49 AM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Nov 24, 9:24 PM
Unknown Object (File)
Thu, Nov 6, 10:36 PM
Unknown Object (File)
Nov 3 2025, 2:08 AM
Unknown Object (File)
Nov 2 2025, 9:03 AM
Unknown Object (File)
Oct 31 2025, 11:14 PM
Unknown Object (File)
Oct 31 2025, 6:12 AM
Unknown Object (File)
Oct 31 2025, 2:44 AM
Unknown Object (File)
Oct 31 2025, 2:20 AM

Details

Reviewers
jhb
Group Reviewers
csprng
Commits
rG685a78570b35: random: remove hifn(4)
Summary

The Hifn 7955 & 7956 only supports deprecated & NIST disallowed
algorithms (NIST SP800-224idp): SHA1 and SHA1-HMAC.

Furtermore the entropy RNG of the Hifn 7751, 7951, 7811, 7955,
and 7956 has no NIST Entropy Source Validation (ESV) certificate
and cannot be used in a FIPS-140-3 nor Common Criteara environment.

Furtermore the most prolific instance for FreeBSD was the
Soekris Engineering vpn1201, vpn1211, vpn1401, and vpn1411
offerings. These are all 32-bit only processors. The i386
kernel was de-supported in 15.0.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

Also share/man/man4/hifn.4 and any possible xrefs

jhb added a subscriber: jhb.

As with safe(4), FreeBSD itself has not yet deprecated SHA1 and SHA1-HMAC, but I think the hardware is ancient.

ObsoleteFiles.inc
54

Typical comment lines for drivers are this succinct (and we don't generally list FreeBSD versions in this file)

This revision is now accepted and ready to land.Oct 28 2025, 7:02 PM

s/Furtermore/Furthermore/g in the commit log btw.

This revision now requires review to proceed.Oct 28 2025, 11:45 PM
This revision was not accepted when it landed; it landed in state Needs Review.Oct 29 2025, 6:03 AM
Closed by commit rG685a78570b35: random: remove hifn(4) (authored by obrien). · Explain Why
This revision was automatically updated to reflect the committed changes.