openbsd/src/lib/libcrypto/rand/rand.h, branch OPENBSD_7_9

Finish hiding symbols in rand.h

2024-04-10T14:53:01+00:00

This removes the LIBRESSL_INTERNAL guards and marks the functions within as LCRYPTO_UNUSED

Unifdef OPENSSL_NO_ENGINE in libcrypto

2023-11-19T15:46:10+00:00

This is mechanical apart from a few manual edits to avoid doubled empty lines. ok jsing

Remove mkerr.pl remnants from LibreSSL

2022-07-12T14:42:50+00:00

This script is not used at all and files are edited by hand instead. Thus remove misleading comments incl. the obsolete script/config. Feedback OK jsing tb

Place most of the RAND_* functions under #ifndef LIBRESSL_INTERNAL (some

2014-10-22T14:02:52+00:00

are still needed for the engine). Our code should use arc4random instead.

Explicitly include in every file that references

2014-07-10T22:45:58+00:00

an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.

tags as requested by miod and tedu

2014-06-12T15:49:31+00:00

KNF.

2014-05-24T15:25:23+00:00

Another e_os2.h -> opensslconf.h.

2014-05-24T10:12:33+00:00

egd support is too dangerous to leave where somebody might find it.

2014-04-18T13:13:50+00:00

ok deraadt.

Replace the old OpenSSL PRNG by direct use of arc4random_buf(), keeping the

2014-04-15T16:52:50+00:00

existing RAND interfaces unchanged. All interfaces allowing external feed or seed of the RNG (either from a file or a local entropy gathering daemon) are kept for ABI compatibility, but are no longer do anything. While the OpenSSL PRNG was required 15+ years ago when many systems lacked proper entropy collection, things have evolved and one can reasonably assume it is better to use the kernel (system global) entropy pool rather than trying to build one's own and having to compensate for thread scheduling... Whoever thought that RAND_screen(), feeding the PRNG with the contents of the local workstation's display, under Win32, was a smart idea, ought to be banned from security programming. ok beck@ deraadt@ tedu@