DRBG: add check for XOF so these can be disallowed by the DRBGs

[oweals/openssl.git] / crypto / rand / drbg_hash.c

diff --git a/crypto/rand/drbg_hash.c b/crypto/rand/drbg_hash.c
index 5ff1d117c94f688d2174130be10dcfacf71a43ac..f087d889655fbfa254fce849d78c9e07fc3299fb 100644 (file)
--- a/crypto/rand/drbg_hash.c
+++ b/crypto/rand/drbg_hash.c
@@ -317,6 +317,8 @@ int drbg_hash_init(RAND_DRBG *drbg)
     if (md == NULL)
         return 0;
 
+    if ((EVP_MD_flags(md) & EVP_MD_FLAG_XOF) != 0)
+        return 0;
 
     drbg->meth = &drbg_hash_meth;