openssl/providers/fips
Pauli 7d615e2178 rand_drbg: remove RAND_DRBG.
The RAND_DRBG API did not fit well into the new provider concept as
implemented by EVP_RAND and EVP_RAND_CTX. The main reason is that the
RAND_DRBG API is a mixture of 'front end' and 'back end' API calls
and some of its API calls are rather low-level. This holds in particular
for the callback mechanism (RAND_DRBG_set_callbacks()) and the RAND_DRBG
type changing mechanism (RAND_DRBG_set()).

Adding a compatibility layer to continue supporting the RAND_DRBG API as
a legacy API for a regular deprecation period turned out to come at the
price of complicating the new provider API unnecessarily. Since the
RAND_DRBG API exists only since version 1.1.1, it was decided by the OMC
to drop it entirely.

Other related changes:

Use RNG instead of DRBG in EVP_RAND documentation.  The documentation was
using DRBG in places where it should have been RNG or CSRNG.

Move the RAND_DRBG(7) documentation to EVP_RAND(7).

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/12509)
2020-08-07 14:16:47 +10:00
..
build.info Add pairwise consistency self tests to asym keygenerators 2020-03-03 14:02:36 +10:00
fipsprov.c rand_drbg: remove RAND_DRBG. 2020-08-07 14:16:47 +10:00
self_test_data.inc fips rand: DRBG KAT self test updates to provider model. 2020-06-24 20:05:42 +10:00
self_test_kats.c Revert "kdf: make function naming consistent." 2020-07-16 14:21:07 +02:00
self_test.c Add ERR_raise() errors to fips OSSL_provider_init and self tests. 2020-07-21 16:30:02 +10:00
self_test.h Make the naming scheme for dispatched functions more consistent 2020-06-24 22:01:22 +02:00