From: Lutz Jänicke <jaenicke@openssl.org>
Date: Tue, 15 May 2001 16:02:35 +0000 (+0000)
Subject: Increase ENTROPY_NEEDED to support Rijndael's larger key size.
X-Git-Tag: OpenSSL_0_9_6c~182^2~157
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=e8734731d3b39cf3f7fa6acb055d22e0bdc2a7ff;p=oweals%2Fopenssl.git

Increase ENTROPY_NEEDED to support Rijndael's larger key size.
---

diff --git a/CHANGES b/CHANGES
index a3292d244d..f3f345ac10 100644
--- a/CHANGES
+++ b/CHANGES
@@ -11,6 +11,9 @@
          *) applies to 0.9.6a (/0.9.6b) and 0.9.7
          +) applies to 0.9.7 only
 
+  +) Increase ENTROPY_NEEDED to 32 bytes, as Rijndael can operate with
+     256 bit (=32 byte) keys. Of course seeding with more entropy bytes
+     than this minimum value is recommended.
 
   +) New random seeder for OpenVMS, using the system process statistics
      that are easily reachable.
diff --git a/crypto/rand/rand_lcl.h b/crypto/rand/rand_lcl.h
index 866eebeffc..1d9670738e 100644
--- a/crypto/rand/rand_lcl.h
+++ b/crypto/rand/rand_lcl.h
@@ -112,7 +112,7 @@
 #ifndef HEADER_RAND_LCL_H
 #define HEADER_RAND_LCL_H
 
-#define ENTROPY_NEEDED 20  /* require 160 bits = 20 bytes of randomness */
+#define ENTROPY_NEEDED 32  /* require 256 bits = 32 bytes of randomness */
 
 
 #if !defined(USE_MD5_RAND) && !defined(USE_SHA1_RAND) && !defined(USE_MDC2_RAND) && !defined(USE_MD2_RAND)