[openssl-users] Why default FIPS DBRG only call the RAND_poll() once?

[Gaofan]

hi all,


I set the fips mode and call the RAND_pseudo_bytes for more than 1<<24 times to trigger the reseed process, but I found RAND_Poll() still cannot be called in the reseed process.
if (!initialized) {
        RAND_poll();
        initialized = 1;
    }
the initialized  cannot be changed during the reseed process, can anyone help, why it will not call the RAND_poll() to get the data from the /dev/urandom? Thanks a lot.


Best regard
Gaofan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180917/f2278f0a/attachment.html>