]> git.ipfire.org Git - thirdparty/openssl.git/commit
ctr-drbg: always use the DF for OpenSSL's DRBGs
authorPauli <ppzgs1@gmail.com>
Mon, 23 Sep 2024 04:45:41 +0000 (14:45 +1000)
committerTomas Mraz <tomas@openssl.org>
Tue, 24 Sep 2024 15:50:58 +0000 (17:50 +0200)
commit0ab796ef9674b378ac644ad8d477685619a2ff37
treed777f8667950b42ed18ec61c129b7f798e3f3428
parent4c6c69731f218d22be244a854c0f6581dd0154bd
ctr-drbg: always use the DF for OpenSSL's DRBGs

Force the use of the derivation function when creating OpenSSL's internal
DRBGs.

FIPS mandates the use of a derivation function, so 3.4 cannot be validated as
it stands which run counter to the indicator work that was included.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Hugo Landau <hlandau@devever.net>
(Merged from https://github.com/openssl/openssl/pull/25511)
crypto/rand/rand_lib.c