It's a PRNG, so you fix the inputs and make sure the output is correct for all possible parameter sets. Matthew Green has more on this here: http://blog.crypto

It's a PRNG, so you fix the inputs and make sure the output is correct for all possible parameter sets. Matthew Green has more on this here: http://blog.cryptographyengineering.com/2014/03/how-do-you-know-if-rng-is-working.html http://blog.cryptographyengineering.com/2014/03/how-do-you-k... ('Known Answer Tests (KATs)' section).