fips140: reset the reseed counter only on reseed

diff --git a/lib/nettle/int/drbg-aes.c b/lib/nettle/int/drbg-aes.c
index 6835385356b67bc0ca9bf85987caa7f84a787ef0..f8b693bcd104a1b7966ca6a3a1e214aac85ca120 100644 (file)
--- a/lib/nettle/int/drbg-aes.c
+++ b/lib/nettle/int/drbg-aes.c
@@ -67,7 +67,6 @@ drbg_aes_update(struct drbg_aes_ctx *ctx,
 
        memcpy(ctx->v, &tmp[DRBG_AES_KEY_SIZE], AES_BLOCK_SIZE);
 
-       ctx->reseed_counter = 1;
        ctx->seeded = 1;
 }
 
@@ -93,6 +92,7 @@ drbg_aes_reseed(struct drbg_aes_ctx *ctx,
        memxor(tmp, entropy, entropy_size);
 
        drbg_aes_update(ctx, tmp);
+       ctx->reseed_counter = 1;
 
        return 1;
 }