diff options
author | Rich Salz <rsalz@openssl.org> | 2017-08-02 14:00:52 -0400 |
---|---|---|
committer | Rich Salz <rsalz@openssl.org> | 2017-08-03 10:45:17 -0400 |
commit | ddc6a5c8f5900959bdbdfee79e1625a3f7808acd (patch) | |
tree | 3121037aca10793706bbc4b8800b40ba305a1c06 /include | |
parent | ae3947de09522206d61c0206a733517b10a910f8 (diff) | |
download | openssl-ddc6a5c8f5900959bdbdfee79e1625a3f7808acd.tar.gz |
Add RAND_priv_bytes() for private keys
Add a new global DRBG for private keys used by RAND_priv_bytes.
Add BN_priv_rand() and BN_priv_rand_range() which use RAND_priv_bytes().
Change callers to use the appropriate BN_priv... function.
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/4076)
Diffstat (limited to 'include')
-rw-r--r-- | include/openssl/bn.h | 2 | ||||
-rw-r--r-- | include/openssl/bnerr.h | 1 | ||||
-rw-r--r-- | include/openssl/rand.h | 1 |
3 files changed, 4 insertions, 0 deletions
diff --git a/include/openssl/bn.h b/include/openssl/bn.h index 7e04b83ecd..f77b4b90a8 100644 --- a/include/openssl/bn.h +++ b/include/openssl/bn.h @@ -154,7 +154,9 @@ void BN_CTX_start(BN_CTX *ctx); BIGNUM *BN_CTX_get(BN_CTX *ctx); void BN_CTX_end(BN_CTX *ctx); int BN_rand(BIGNUM *rnd, int bits, int top, int bottom); +int BN_priv_rand(BIGNUM *rnd, int bits, int top, int bottom); int BN_rand_range(BIGNUM *rnd, const BIGNUM *range); +int BN_priv_rand_range(BIGNUM *rnd, const BIGNUM *range); int BN_pseudo_rand(BIGNUM *rnd, int bits, int top, int bottom); int BN_pseudo_rand_range(BIGNUM *rnd, const BIGNUM *range); int BN_num_bits(const BIGNUM *a); diff --git a/include/openssl/bnerr.h b/include/openssl/bnerr.h index 0578473ef2..b63af9df42 100644 --- a/include/openssl/bnerr.h +++ b/include/openssl/bnerr.h @@ -23,6 +23,7 @@ int ERR_load_BN_strings(void); * BN function codes. */ # define BN_F_BNRAND 127 +# define BN_F_BNRAND_RANGE 138 # define BN_F_BN_BLINDING_CONVERT_EX 100 # define BN_F_BN_BLINDING_CREATE_PARAM 128 # define BN_F_BN_BLINDING_INVERT_EX 101 diff --git a/include/openssl/rand.h b/include/openssl/rand.h index 2aecbb7bcb..a8c1943d91 100644 --- a/include/openssl/rand.h +++ b/include/openssl/rand.h @@ -40,6 +40,7 @@ RAND_METHOD *RAND_OpenSSL(void); # define RAND_cleanup() while(0) continue # endif int RAND_bytes(unsigned char *buf, int num); +int RAND_priv_bytes(unsigned char *buf, int num); DEPRECATEDIN_1_1_0(int RAND_pseudo_bytes(unsigned char *buf, int num)) void RAND_seed(const void *buf, int num); |