[openssl/openssl] bafbe0: doc: document that prediction resistance comes wit...

Pauli noreply at github.com
Tue Mar 14 21:11:38 UTC 2023


  Branch: refs/heads/openssl-3.1
  Home:   https://github.com/openssl/openssl
  Commit: bafbe018b11565580c34345d4827aae5cae477e9
      https://github.com/openssl/openssl/commit/bafbe018b11565580c34345d4827aae5cae477e9
  Author: Pauli <pauli at openssl.org>
  Date:   2023-03-15 (Wed, 15 Mar 2023)

  Changed paths:
    M doc/man3/EVP_RAND.pod

  Log Message:
  -----------
  doc: document that prediction resistance comes with a hidden cost

In the default setup, using prediction resistance cascades to a reseeding
of all DRBGs.  The cost for this will be excessive for highly threaded
applications.

Fixes #20414

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/20452)

(cherry picked from commit d90bd3468a9a8d2af6b821be50c1034e21d782ca)




More information about the openssl-commits mailing list