generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

New function to return security strength of PRNG.

Browse Source
This commit is contained in:
Dr. Stephen Henson 2011-04-09 16:49:59 +00:00
parent 31360957fb
commit 68ea88b8d1
2 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
fips/rand/fips_rand.h
View File

@ -114,6 +114,8 @@ const RAND_METHOD *FIPS_drbg_method(void);
int FIPS_rand_set_method(const RAND_METHOD *meth); int FIPS_rand_set_method(const RAND_METHOD *meth);
int FIPS_rand_strength(void);
#ifdef __cplusplus #ifdef __cplusplus
} }
#endif #endif

22
fips/rand/fips_rand_lib.c
View File

@ -138,3 +138,25 @@ int FIPS_rand_status(void)
return fips_rand_meth->status(); return fips_rand_meth->status();
return 0; return 0;
} }
/* Return instantiated strength of PRNG. For DRBG this is an internal
* parameter. For X9.31 PRNG it is 80 bits (from SP800-131). Any other
* type of PRNG is not approved and returns 0 in FIPS mode and maximum
* 256 outside FIPS mode.
*/
int FIPS_rand_strength(void)
{
if (fips_approved_rand_meth == 1)
return FIPS_drbg_get_strength(FIPS_get_default_drbg());
else if (fips_approved_rand_meth == 2)
return 80;
else if (fips_approved_rand_meth == 0)
{
if (FIPS_mode())
return 0;
else
return 256;
}
return 0;
}