RAND_pseudo_bytes is good enough for encryption IVs,

we should not need RAND_bytes (and we cannot use the latter
unless we load a seed file)
This commit is contained in:
Bodo Möller 2000-01-24 09:32:20 +00:00
parent 7be5af1ddf
commit f13b93d3b4

View File

@ -448,11 +448,8 @@ bad:
"invalid hex salt value\n");
goto end;
}
} else if (RAND_bytes(salt, PKCS5_SALT_LEN) <= 0) {
BIO_printf(bio_err,
"prng not seeded\n");
} else if (RAND_pseudo_bytes(salt, PKCS5_SALT_LEN) <= 0)
goto end;
}
/* If -P option then don't bother writing */
if((printkey != 2)
&& (BIO_write(wbio,magic,