[openssl-dev] Work on a new RNG for OpenSSL

Salz, Rich rsalz at akamai.com
Sun Aug 20 13:43:48 UTC 2017


➢ P.S. I wonder if it's feasible to have a configuration parameter that would allow me to tell the TLS code to invoke RAND_add_ex() before generating session keys?
    
At this point, you might as well just change the code to use getrandom() and pass it through.

 Either you accept that NIST SP 90A is right, or you just bypass it completely.  We’re in the first camp.  But it’s open source, do what fits your needs.



More information about the openssl-dev mailing list