[openssl-users] Why default FIPS DBRG only call the RAND_poll() once?

Gaofan gaofanv at 126.com
Mon Sep 17 09:40:34 UTC 2018

hi all,

I set the fips mode and call the RAND_pseudo_bytes for more than 1<<24 times to trigger the reseed process, but I found RAND_Poll() still cannot be called in the reseed process.
if (!initialized) {
        initialized = 1;
the initialized  cannot be changed during the reseed process, can anyone help, why it will not call the RAND_poll() to get the data from the /dev/urandom? Thanks a lot.

Best regard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180917/f2278f0a/attachment.html>

More information about the openssl-users mailing list