[openssl/openssl] 952fdb: doc: document that prediction resistance comes wit...

Pauli noreply at github.com
Tue Mar 14 21:11:39 UTC 2023


  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: 952fdbd10da950b5599965708e9661e28269e595
      https://github.com/openssl/openssl/commit/952fdbd10da950b5599965708e9661e28269e595
  Author: Pauli <pauli at openssl.org>
  Date:   2023-03-15 (Wed, 15 Mar 2023)

  Changed paths:
    M doc/man3/EVP_RAND.pod

  Log Message:
  -----------
  doc: document that prediction resistance comes with a hidden cost

In the default setup, using prediction resistance cascades to a reseeding
of all DRBGs.  The cost for this will be excessive for highly threaded
applications.

Fixes #20414

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/20452)

(cherry picked from commit d90bd3468a9a8d2af6b821be50c1034e21d782ca)




More information about the openssl-commits mailing list