From: Andreas Schneider <asn@samba.org>
Date: Mon, 12 Aug 2019 16:56:35 +0000 (+0200)
Subject: s4:samdb: Use generate_nonce_buffer() for AEC GCM nonce
X-Git-Tag: tdb-1.4.2~114
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a3e36dd8f43a5c06969ae158fa54fbc649f44d03;p=thirdparty%2Fsamba.git

s4:samdb: Use generate_nonce_buffer() for AEC GCM nonce

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
---

diff --git a/source4/dsdb/samdb/ldb_modules/encrypted_secrets.c b/source4/dsdb/samdb/ldb_modules/encrypted_secrets.c
index b2df15c08f4..deaa03cbb35 100644
--- a/source4/dsdb/samdb/ldb_modules/encrypted_secrets.c
+++ b/source4/dsdb/samdb/ldb_modules/encrypted_secrets.c
@@ -447,7 +447,7 @@ static struct ldb_val samba_encrypt_aead(int *err,
 			goto error_exit;
 		}
 
-		generate_random_buffer(iv, AES_GCM_128_IV_SIZE);
+		generate_nonce_buffer(iv, AES_GCM_128_IV_SIZE);
 
 		es->iv.length = AES_GCM_128_IV_SIZE;
 		es->iv.data   = iv;