Disable Dual EC DRBG.

Return an error if an attempt is made to enable the Dual EC DRBG: it is not used by default.
2013-09-16 05:23:44 +01:00
parent 39aabe59c8
commit a4870de5aa
3 changed files with 10 additions and 0 deletions
--- a/crypto/rand/rand.h
+++ b/crypto/rand/rand.h
@@ -138,6 +138,7 @@ void ERR_load_RAND_strings(void);
 #define RAND_F_SSLEAY_RAND_BYTES			 100

 /* Reason codes. */
+#define RAND_R_DUAL_EC_DRBG_DISABLED			 104
 #define RAND_R_ERROR_INITIALISING_DRBG			 102
 #define RAND_R_ERROR_INSTANTIATING_DRBG			 103
 #define RAND_R_NO_FIPS_RANDOM_METHOD_SET		 101