man: clarify the 'random number generator must be seeded' requirement
authorDr. Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Thu, 27 Jun 2019 08:12:08 +0000 (10:12 +0200)
committerDr. Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Thu, 27 Jun 2019 12:48:43 +0000 (14:48 +0200)
commitf987a4dd8929b4552f2fa19f09fd2d4115709647
tree964b7fd86a2d5a178be31658ea1699895c7100c6
parent4fb5fdb758cb2f0e830109ada066328507708d0c
man: clarify the 'random number generator must be seeded' requirement

The manual pages require for some API functions that the 'random number
generator must be seeded' before calling the function.  Initially, this
was meant literally, i.e. the OpenSSL CSPRNG had to be seeded manually
before calling these functions.

Since version 1.1.1, the CSPRNG is seeded automatically on first use,
so it's not the responsibility of the programmer anymore.  Still, he
needs to be aware that the seeding might fail.

Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/9257)

(cherry picked from commit 262c00882a2fd7cf16672bf467a86f75b4098a7c)
13 files changed:
doc/man3/BN_generate_prime.pod
doc/man3/DES_random_key.pod
doc/man3/DSA_generate_key.pod
doc/man3/DSA_sign.pod
doc/man3/EVP_DigestSignInit.pod
doc/man3/EVP_DigestVerifyInit.pod
doc/man3/EVP_SealInit.pod
doc/man3/EVP_SignInit.pod
doc/man3/RSA_blinding_on.pod
doc/man3/RSA_generate_key.pod
doc/man3/RSA_padding_add_PKCS1_type_1.pod
doc/man3/RSA_sign_ASN1_OCTET_STRING.pod
doc/man7/RAND.pod