mirror of
https://github.com/openssl/openssl.git
synced 2024-12-27 06:21:43 +08:00
7998e7dc07
The 'rand_generate' method is not well suited for being used with weak entropy sources in the 'get_entropy' callback, because the caller needs to provide a preallocated buffer without knowing how much bytes are actually needed to collect the required entropy. Instead we use the 'rand_get_seed' and 'rand_clear_seed' methods which were exactly designed for this purpose: it's the callee who allocates and fills the buffer, and finally cleans it up again. The 'rand_get_seed' and 'rand_clear_seed' methods are currently optional for a provided random generator. We could fall back to using 'rand_generate' if those methods are not implemented. However, imo it would be better to simply make them an officially documented requirement for seed sources. Fixes #22332 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22394) |
||
|---|---|---|
| .. | ||
| __DECC_INCLUDE_EPILOGUE.H | ||
| __DECC_INCLUDE_PROLOGUE.H | ||
| aes_platform.h | ||
| aria.h | ||
| asn1_dsa.h | ||
| asn1.h | ||
| asn1err.h | ||
| async.h | ||
| asyncerr.h | ||
| bioerr.h | ||
| bn_conf.h.in | ||
| bn_dh.h | ||
| bn_srp.h | ||
| bn.h | ||
| bnerr.h | ||
| buffererr.h | ||
| chacha.h | ||
| cmll_platform.h | ||
| cmperr.h | ||
| cmserr.h | ||
| comperr.h | ||
| conferr.h | ||
| context.h | ||
| crmferr.h | ||
| cryptlib.h | ||
| cryptoerr.h | ||
| cterr.h | ||
| ctype.h | ||
| decoder.h | ||
| decodererr.h | ||
| des_platform.h | ||
| dh.h | ||
| dherr.h | ||
| dsa.h | ||
| dsaerr.h | ||
| dso_conf.h.in | ||
| ec.h | ||
| ecerr.h | ||
| ecx.h | ||
| encoder.h | ||
| encodererr.h | ||
| engine.h | ||
| engineerr.h | ||
| err.h | ||
| ess.h | ||
| esserr.h | ||
| evp.h | ||
| evperr.h | ||
| httperr.h | ||
| lhash.h | ||
| md32_common.h | ||
| modes.h | ||
| objects.h | ||
| objectserr.h | ||
| ocsperr.h | ||
| pem.h | ||
| pemerr.h | ||
| pkcs7.h | ||
| pkcs7err.h | ||
| pkcs12err.h | ||
| poly1305.h | ||
| ppc_arch.h | ||
| punycode.h | ||
| rand_pool.h | ||
| rand.h | ||
| randerr.h | ||
| riscv_arch.def | ||
| riscv_arch.h | ||
| rsa.h | ||
| rsaerr.h | ||
| security_bits.h | ||
| sha.h | ||
| siphash.h | ||
| siv.h | ||
| sm2.h | ||
| sm2err.h | ||
| sm4_platform.h | ||
| sm4.h | ||
| sparc_arch.h | ||
| sparse_array.h | ||
| store.h | ||
| storeerr.h | ||
| tserr.h | ||
| types.h | ||
| uierr.h | ||
| x509.h | ||
| x509err.h | ||
| x509v3err.h | ||