]> git.ipfire.org Git - thirdparty/linux.git/commitdiff
crypto: ecc - Use crypto_stdrng_get_bytes()
authorEric Biggers <ebiggers@kernel.org>
Thu, 26 Mar 2026 00:14:59 +0000 (17:14 -0700)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 3 Apr 2026 00:56:12 +0000 (08:56 +0800)
Replace the sequence of crypto_get_default_rng(),
crypto_rng_get_bytes(), and crypto_put_default_rng() with the equivalent
helper function crypto_stdrng_get_bytes().

Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/ecc.c

index 08150b14e17e38b77b106a925897b9e0ee041ea4..43b0def3a225cc15be1c82aff77713f0b0e13558 100644 (file)
@@ -1533,16 +1533,11 @@ int ecc_gen_privkey(unsigned int curve_id, unsigned int ndigits,
         * The maximum security strength identified by NIST SP800-57pt1r4 for
         * ECC is 256 (N >= 512).
         *
-        * This condition is met by the default RNG because it selects a favored
-        * DRBG with a security strength of 256.
+        * This condition is met by stdrng because it selects a favored DRBG
+        * with a security strength of 256.
         */
-       if (crypto_get_default_rng())
-               return -EFAULT;
-
        /* Step 3: obtain N returned_bits from the DRBG. */
-       err = crypto_rng_get_bytes(crypto_default_rng,
-                                  (u8 *)private_key, nbytes);
-       crypto_put_default_rng();
+       err = crypto_stdrng_get_bytes(private_key, nbytes);
        if (err)
                return err;