]> git.ipfire.org Git - thirdparty/openssl.git/commit
Change usage of RAND_pseudo_bytes to RAND_bytes
authorMatt Caswell <matt@openssl.org>
Mon, 25 Apr 2016 16:06:56 +0000 (17:06 +0100)
committerMatt Caswell <matt@openssl.org>
Mon, 27 Jun 2016 14:02:34 +0000 (15:02 +0100)
commit05200ee5c61ecd38cdcacf9c547b0c3877e8cfef
treebd2cd4dfc1dc820e0287a289867cc49c8ac38cc7
parent3681a4558c13198944e6f7f149c4be188e076e14
Change usage of RAND_pseudo_bytes to RAND_bytes

RAND_pseudo_bytes() allows random data to be returned even in low entropy
conditions. Sometimes this is ok. Many times it is not. For the avoidance
of any doubt, replace existing usage of RAND_pseudo_bytes() with
RAND_bytes().

Reviewed-by: Rich Salz <rsalz@openssl.org>
30 files changed:
apps/enc.c
apps/passwd.c
apps/s_server.c
crypto/asn1/asn_mime.c
crypto/asn1/p5_pbe.c
crypto/asn1/p5_pbev2.c
crypto/bio/bf_nbio.c
crypto/bn/bn_rand.c
crypto/cms/cms_enc.c
crypto/cms/cms_ess.c
crypto/cms/cms_pwri.c
crypto/des/des.c
crypto/des/enc_writ.c
crypto/dsa/dsa_gen.c
crypto/evp/bio_ok.c
crypto/ocsp/ocsp_ext.c
crypto/pem/pem_lib.c
crypto/pkcs12/p12_mutl.c
crypto/pkcs7/pk7_doit.c
crypto/srp/srp_vfy.c
ssl/d1_both.c
ssl/d1_pkt.c
ssl/d1_srvr.c
ssl/s23_clnt.c
ssl/s2_clnt.c
ssl/s2_srvr.c
ssl/s3_srvr.c
ssl/ssl_lib.c
ssl/ssl_sess.c
ssl/t1_lib.c