Question regarding lock of the master drbg during the fork

Сергей Юнаковский lein360 at
Wed Aug 28 08:51:22 UTC 2019

I have a question regarding the usage of the master DRBG during the fork
operation. As far as I understand from the source code and articles, during
the fork the library will perform the lock of the master DRBG to obtain the
entropy for public and private DRBG.
However, the library does not perform the check of the lock state itself
and it is unclear for me, what will happen if the master DRBG is locked
during the creation of the fork process.

Additionally, what was the purpose of such complicated scheme for DRBGs
except for NIST requirements?  Is it possible to solve fork problem without
implementing the chain of DRBGs?

Can you please help with this?


Here is the code from the rand_lib.c:
if (RAND_DRBG_generate(drbg->parent,
buffer, bytes_needed,
NULL, 0) != 0)
bytes = bytes_needed;
= tsan_load(&drbg->parent->reseed_prop_counter);
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the openssl-users mailing list