From: Frederik Wedel-Heinen <frederik.wedel-heinen@dencrypt.dk>
Date: Mon, 26 Jan 2026 08:12:14 +0000 (+0100)
Subject: Remove remaining RAND_DRBG.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=713eb194a88203dab04423a0693ae0a0c88634ac;p=thirdparty%2Fopenssl.git

Remove remaining RAND_DRBG.

Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
MergeDate: Tue Feb 17 14:09:07 2026
(Merged from https://github.com/openssl/openssl/pull/29782)
---

diff --git a/.clang-format b/.clang-format
index e4e27555ea6..1937223baf0 100644
--- a/.clang-format
+++ b/.clang-format
@@ -883,7 +883,6 @@ TypeNames:
   - "QUIC_URXE"
   - "QUIC_URXE_LIST"
   - "QUIC_XSO"
-  - "RAND_DRBG"
   - "RAND_METHOD"
   - "RAND_POOL"
   - "RAW_EXTENSION"
diff --git a/Configure b/Configure
index 53a2e43cc3f..9a580f1ef69 100755
--- a/Configure
+++ b/Configure
@@ -1373,8 +1373,7 @@ at runtime in openssl.cnf or configured at build time with
 -DOPENSSL_DEFAULT_SEED_SRC.
 
 Please read the 'Note on random number generation' section in the
-INSTALL.md instructions and the RAND_DRBG(7) manual page for more
-details.
+INSTALL.md instructions for more details.
 ============================== WARNING ===============================
 
 _____
diff --git a/doc/man3/EVP_RAND.pod b/doc/man3/EVP_RAND.pod
index 19519d40086..ade6bac7496 100644
--- a/doc/man3/EVP_RAND.pod
+++ b/doc/man3/EVP_RAND.pod
@@ -79,7 +79,7 @@ both deterministic and not.
 If you just want to generate random bytes then you don't need to use
 these functions: just call RAND_bytes() or RAND_priv_bytes().
 If you want to do more, these calls should be used instead of the older
-RAND and RAND_DRBG functions.
+RAND functions.
 
 After creating a B<EVP_RAND_CTX> for the required algorithm using
 EVP_RAND_CTX_new(), inputs to the algorithm are supplied either by
diff --git a/include/openssl/types.h b/include/openssl/types.h
index 9eaeb699d34..592201a1894 100644
--- a/include/openssl/types.h
+++ b/include/openssl/types.h
@@ -157,7 +157,6 @@ typedef struct ec_key_method_st EC_KEY_METHOD;
 #endif
 
 typedef struct rand_meth_st RAND_METHOD;
-typedef struct rand_drbg_st RAND_DRBG;
 
 typedef struct ssl_dane_st SSL_DANE;
 typedef struct x509_st X509;
diff --git a/util/indent.pro b/util/indent.pro
index 6fabf305da9..52f7a60e37f 100644
--- a/util/indent.pro
+++ b/util/indent.pro
@@ -619,7 +619,5 @@
 -T ossl_uintmax_t
 -T ossl_uintmax_t
 -T CT_POLICY_EVAL_CTX
--T RAND_DRBG
--T RAND_DRBG_CTR
 -T RAND_POOL
 -T RAND_METHOD