Commit cf51a0dc authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Seed PRNG with DSA and ECDSA digests for additional protection against 

possible PRNG state duplication.
parent 48b30bf0

crypto/dsa/dsa_asn1.c

+2 −0
Original line number Diff line number Diff line
@@ -62,6 +62,7 @@ 
#include <openssl/asn1.h>

#include <openssl/asn1t.h>

#include <openssl/bn.h>

#include <openssl/rand.h>

#ifdef OPENSSL_FIPS

#include <openssl/fips.h>

#endif
@@ -155,6 +156,7 @@ int DSA_sign(int type, const unsigned char *dgst, int dlen, unsigned char *sig, 
		return 0;

		}

#endif

	RAND_seed(dgst, dlen);

	s=DSA_do_sign(dgst,dlen,dsa);

	if (s == NULL)

		{

crypto/ecdsa/ecs_sign.c

+2 −0
Original line number Diff line number Diff line
@@ -57,6 +57,7 @@ 
#ifndef OPENSSL_NO_ENGINE

#include <openssl/engine.h>

#endif

#include <openssl/rand.h>



ECDSA_SIG *ECDSA_do_sign(const unsigned char *dgst, int dlen, EC_KEY *eckey)

{
@@ -83,6 +84,7 @@ int ECDSA_sign_ex(int type, const unsigned char *dgst, int dlen, unsigned char 
	EC_KEY *eckey)

{

	ECDSA_SIG *s;

	RAND_seed(dgst, dlen);

	s = ECDSA_do_sign_ex(dgst, dlen, kinv, r, eckey);

	if (s == NULL)

	{