openbsd/src/lib/libcrypto/rand/rand_lib.c, branch OPENBSD_6_8_BASE

Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().

2014-10-22T13:02:04+00:00

arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@

Only import cryptlib.h in the four source files that actually need it.

2014-07-11T08:44:49+00:00

Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@

Explicitly include in every file that references

2014-07-10T22:45:58+00:00

an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.

tags as requested by miod and tedu

2014-06-12T15:49:31+00:00

KNF.

2014-05-24T15:25:23+00:00

another round of chemo for the RAND code to provide clarity.

2014-04-18T13:19:03+00:00

ok deraadt

Replace the old OpenSSL PRNG by direct use of arc4random_buf(), keeping the

2014-04-15T16:52:50+00:00

existing RAND interfaces unchanged. All interfaces allowing external feed or seed of the RNG (either from a file or a local entropy gathering daemon) are kept for ABI compatibility, but are no longer do anything. While the OpenSSL PRNG was required 15+ years ago when many systems lacked proper entropy collection, things have evolved and one can reasonably assume it is better to use the kernel (system global) entropy pool rather than trying to build one's own and having to compensate for thread scheduling... Whoever thought that RAND_screen(), feeding the PRNG with the contents of the local workstation's display, under Win32, was a smart idea, ought to be banned from security programming. ok beck@ deraadt@ tedu@

Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.

2014-04-13T15:25:35+00:00

resolve conflicts

2012-10-13T21:25:14+00:00

resolve conflicts, fix local changes

2010-10-01T22:59:01+00:00