Ondřej Surý
1baed21688
The RAND_bytes() implementation differs between the OpenSSL versions and uses the system entropy only for seeding its internal CSPRNG. The uv_random() on the other hand uses the system provided CSPRNG. Switch from RAND_bytes() to uv_random() to use system provided CSPRNG.
36 lines
853 B
C
36 lines
853 B
C
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <stdlib.h>
|
|
|
|
#include <isc/lang.h>
|
|
|
|
/*! \file isc/entropy.h
|
|
* \brief Implements wrapper around CSPRNG cryptographic library calls
|
|
* for getting cryptographically secure pseudo-random numbers.
|
|
*
|
|
* Uses synchronous version of uv_random().
|
|
*/
|
|
|
|
ISC_LANG_BEGINDECLS
|
|
|
|
void
|
|
isc_entropy_get(void *buf, size_t buflen);
|
|
/*!<
|
|
* \brief Get cryptographically-secure pseudo-random data.
|
|
*/
|
|
|
|
ISC_LANG_ENDDECLS
|