Commit f13b93d3 authored by Bodo Möller's avatar Bodo Möller
Browse files

RAND_pseudo_bytes is good enough for encryption IVs, 

we should not need RAND_bytes (and we cannot use the latter
unless we load a seed file)
parent 7be5af1d

apps/enc.c

+1 −4
Original line number Diff line number Diff line
@@ -448,11 +448,8 @@ bad: 
								"invalid hex salt value\n");

							goto end;

						}

					} else if (RAND_bytes(salt, PKCS5_SALT_LEN) <= 0) {

						BIO_printf(bio_err,

							"prng not seeded\n");

					} else if (RAND_pseudo_bytes(salt, PKCS5_SALT_LEN) <= 0)

						goto end;

					}

					/* If -P option then don't bother writing */

					if((printkey != 2)

					   && (BIO_write(wbio,magic,