[openssl/openssl] d90bd3: doc: document that prediction resistance comes wit...

Pauli noreply at github.com
Tue Mar 14 21:11:37 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: d90bd3468a9a8d2af6b821be50c1034e21d782ca
      https://github.com/openssl/openssl/commit/d90bd3468a9a8d2af6b821be50c1034e21d782ca
  Author: Pauli <pauli at openssl.org>
  Date:   2023-03-15 (Wed, 15 Mar 2023)

  Changed paths:
    M doc/man3/EVP_RAND.pod

  Log Message:
  -----------
  doc: document that prediction resistance comes with a hidden cost

In the default setup, using prediction resistance cascades to a reseeding
of all DRBGs.  The cost for this will be excessive for highly threaded
applications.

Fixes #20414

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/20452)




More information about the openssl-commits mailing list