Allocate DRBG additional data pool from non-secure memory
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Tue, 23 Jul 2019 13:14:14 +0000 (23:14 +1000)
committerPauli <paul.dale@oracle.com>
Tue, 23 Jul 2019 13:14:14 +0000 (23:14 +1000)
commite8d866dcb170dbe22dcda418cd5df655f67dbc0b
treef607599db6f96c7e7b116089b217e139d99f03cd
parent77cb24344dd522b4b7882be50aa199b1ecf4711f
Allocate DRBG additional data pool from non-secure memory

The additional data allocates 12K per DRBG instance in the
secure memory, which is not necessary. Also nonces are not
considered secret.

[extended tests]

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/9424)
crypto/include/internal/rand_int.h
crypto/rand/drbg_lib.c
crypto/rand/rand_lcl.h
crypto/rand/rand_lib.c