Still Failing: openssl/openssl#25118 (master - 3a50a8a)

Travis CI builds at travis-ci.org
Fri May 10 05:42:12 UTC 2019


Build Update for openssl/openssl
-------------------------------------

Build: #25118
Status: Still Failing

Duration: 18 mins and 9 secs
Commit: 3a50a8a (master)
Author: Dr. Matthias St. Pierre
Message: Ignore entropy from RAND_add()/RAND_seed() in FIPS mode

The functions RAND_add() and RAND_seed() provide a legacy API which
enables the application to seed the CSPRNG.

But NIST SP-800-90A clearly mandates that entropy *shall not* be provided
by the consuming application, neither for instantiation, nor for reseeding.

The provided random data will be mixed into the DRBG state as additional
data only, and no entropy will accounted for it.

Reviewed-by: Paul Dale <paul.dale at oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8722)

View the changeset: https://github.com/openssl/openssl/compare/c5f7a99645aa...3a50a8a91ad1

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/530594883?utm_medium=notification&utm_source=email

--

You can unsubscribe from build emails from the openssl/openssl repository going to https://travis-ci.org/account/preferences/unsubscribe?repository=5849220&utm_medium=notification&utm_source=email.
Or unsubscribe from *all* email updating your settings at https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notification&utm_source=email.
Or configure specific recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20190510/72cfedf3/attachment.html>


More information about the openssl-commits mailing list