]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
wolfssl: Remove unused drbg_t instance when building without testable KE
authorTobias Brunner <tobias@strongswan.org>
Fri, 23 May 2025 09:34:35 +0000 (11:34 +0200)
committerTobias Brunner <tobias@strongswan.org>
Tue, 27 May 2025 15:38:32 +0000 (17:38 +0200)
src/libstrongswan/plugins/wolfssl/wolfssl_kem.c

index aff7e56bd11fd4c2f7bf613441f7ddd6c57b1389..042a7e70616940edd9cc9583f83190d9e3e8c172 100644 (file)
@@ -67,10 +67,12 @@ struct private_key_exchange_t {
         */
        chunk_t shared_secret;
 
+#ifdef TESTABLE_KE
        /**
         * DRBG for testing.
         */
        drbg_t *drbg;
+#endif
 };
 
 /**
@@ -81,10 +83,13 @@ static bool get_random(private_key_exchange_t *this, size_t len, uint8_t *out)
 {
        WC_RNG rng;
 
+#ifdef TESTABLE_KE
        if (this->drbg)
        {
                return this->drbg->generate(this->drbg, len, out);
        }
+#endif
+
        if (wc_InitRng(&rng) != 0)
        {
                return FALSE;
@@ -272,7 +277,9 @@ METHOD(key_exchange_t, destroy, void,
        chunk_free(&this->ciphertext);
        wc_MlKemKey_Free(this->kem);
        free(this->kem);
+#ifdef TESTABLE_KE
        DESTROY_IF(this->drbg);
+#endif
        free(this);
 }