From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Tue, 11 May 2004 11:35:34 +0000 (+0000)
Subject: the TLS hello message random values no longer use strong random data.
X-Git-Tag: gnutls_1_1_11~97
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3be818b253389755682235348eebfb940fef015a;p=thirdparty%2Fgnutls.git

the TLS hello message random values no longer use strong random data.
---

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 4f757d7192..cf4d3e5398 100644
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -221,8 +221,7 @@ int _gnutls_tls_create_random(opaque * dst)
 
 	/* Use weak random numbers for the most of the
 	 * buffer except for the first 4 that are the
-	 * system's time, and the last 3 which are of
-	 * better quality.
+	 * system's time.
 	 */
 
 	tim = time(NULL);
@@ -230,13 +229,7 @@ int _gnutls_tls_create_random(opaque * dst)
 	_gnutls_write_uint32(tim, dst);
 
 	if (_gnutls_get_random
-	    (&dst[4], TLS_RANDOM_SIZE - 7, GNUTLS_WEAK_RANDOM) < 0) {
-		gnutls_assert();
-		return GNUTLS_E_MEMORY_ERROR;
-	}
-
-	if (_gnutls_get_random
-	    (&dst[29], 3, GNUTLS_STRONG_RANDOM) < 0) {
+	    (&dst[4], TLS_RANDOM_SIZE - 4, GNUTLS_WEAK_RANDOM) < 0) {
 		gnutls_assert();
 		return GNUTLS_E_MEMORY_ERROR;
 	}