[openssl-users] DRBG and prediction resistance

[Bala Duvvuri]

Hi All,

What is the reason that the DRBG random generation function- fips_drbg_bytes does not consider prediction resistance as input? 

Inside  fips_drbg_bytes
rv = FIPS_drbg_generate(dctx, out, rcnt, 0, adin, adinlen); //prediction resistance disabled

And as a result the entropy generation callback - get_entropy , is never invoked.

How can we enable prediction resistance when using fips_drbg_bytes?

thanks,
Bala