summaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorKurt Roeckx <kurt@roeckx.be>2018-02-18 20:55:28 +0100
committerKurt Roeckx <kurt@roeckx.be>2018-03-17 11:35:33 +0100
commit311276ffe32ab0b161c364727cf8676591dbf47c (patch)
treea1e3cd284a42078146498bdb6e2bea3fa09e9ff3 /include
parenteb238134e0a0fb5ac5c8239ade1dfe77a815aba5 (diff)
Return error when trying to use prediction resistance
There is a requirements of having access to a live entropy source which we can't do with the default callbacks. If you need prediction resistance you need to set up your own callbacks that follow the requirements of NIST SP 800-90C. Reviewed-by: Dr. Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> GH: #5402
Diffstat (limited to 'include')
-rw-r--r--include/openssl/randerr.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/include/openssl/randerr.h b/include/openssl/randerr.h
index afc8213927..4746ad63d4 100644
--- a/include/openssl/randerr.h
+++ b/include/openssl/randerr.h
@@ -71,6 +71,7 @@ int ERR_load_RAND_strings(void);
# define RAND_R_PARENT_LOCKING_NOT_ENABLED 130
# define RAND_R_PARENT_STRENGTH_TOO_WEAK 131
# define RAND_R_PERSONALISATION_STRING_TOO_LONG 116
+# define RAND_R_PREDICTION_RESISTANCE_NOT_SUPPORTED 133
# define RAND_R_PRNG_NOT_SEEDED 100
# define RAND_R_RANDOM_POOL_OVERFLOW 125
# define RAND_R_REQUEST_TOO_LARGE_FOR_DRBG 117