From 2934be91349b365f1350fe9c30e4263be653c0f6 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Thu, 4 Jul 2019 15:41:17 +0100 Subject: Make sure all BIGNUM operations work within the FIPS provider The FIPS provider does not have a default OPENSSL_CTX so, where necessary, we need to ensure we can always access an explicit OPENSSL_CTX. We remove functions from the FIPS provider that use the default OPENSSL_CTX, and fixup some places which were using those removed functions. Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/9310) --- crypto/bn/bn_blind.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'crypto/bn/bn_blind.c') diff --git a/crypto/bn/bn_blind.c b/crypto/bn/bn_blind.c index e003f9a08f..826f3f06aa 100644 --- a/crypto/bn/bn_blind.c +++ b/crypto/bn/bn_blind.c @@ -270,7 +270,7 @@ BN_BLINDING *BN_BLINDING_create_param(BN_BLINDING *b, do { int rv; - if (!BN_priv_rand_range(ret->A, ret->mod)) + if (!BN_priv_rand_range_ex(ret->A, ret->mod, ctx)) goto err; if (int_bn_mod_inverse(ret->Ai, ret->A, ret->mod, ctx, &rv)) break; -- cgit v1.2.3