diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2014-10-19 02:28:41 +0200 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2014-12-08 14:25:38 +0100 |
| commit | ebdf37e4b1cf6e84dbbf031bdfab96206d3a6761 (patch) | |
| tree | 0a70c26554e59fd016d73ab90dd40b43b0af1f19 /crypto/bn/bn_rand.c | |
| parent | remove FIPS module code from crypto/ecdh (diff) | |
| download | openssl-ebdf37e4b1cf6e84dbbf031bdfab96206d3a6761.tar.xz openssl-ebdf37e4b1cf6e84dbbf031bdfab96206d3a6761.zip | |
remove FIPS module code from crypto/bn
Reviewed-by: Tim Hudson <tjh@openssl.org>
Diffstat (limited to 'crypto/bn/bn_rand.c')
| -rw-r--r-- | crypto/bn/bn_rand.c | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/crypto/bn/bn_rand.c b/crypto/bn/bn_rand.c index d550f497d9..7c0ec5153d 100644 --- a/crypto/bn/bn_rand.c +++ b/crypto/bn/bn_rand.c @@ -248,15 +248,7 @@ static int bn_rand_range(int pseudo, BIGNUM *r, const BIGNUM *range) if (n == 1) BN_zero(r); -#ifdef OPENSSL_FIPS - /* FIPS 186-3 is picky about how random numbers for keys etc are - * generated. So we just use the second case which is equivalent to - * "Generation by Testing Candidates" mentioned in B.1.2 et al. - */ - else if (!FIPS_module_mode() && !BN_is_bit_set(range, n - 2) && !BN_is_bit_set(range, n - 3)) -#else else if (!BN_is_bit_set(range, n - 2) && !BN_is_bit_set(range, n - 3)) -#endif { /* range = 100..._2, * so 3*range (= 11..._2) is exactly one bit longer than range */ |