Thread (34 messages) 34 messages, 7 authors, 2021-11-22

Re: [PATCH 1/2] wrapper: add a helper to generate numbers from a CSPRNG

From: brian m. carlson <hidden>
Date: 2021-11-17 01:03:14

On 2021-11-16 at 23:20:45, rsbecker@nexbridge.com wrote:
We do link with libcurl and use OpenSSL as a DLL to handle TLS. The
underlying random source for the nonstop-* configurations as of
OpenSSL 3.0 are PNRG supplied by the vendor (HPE) on ia64 and the
hardware rdrand* instructions on x86. I know that part of the OpenSSL
code rather intimately.
Great, as long as you don't define NO_OPENSSL, I think I can make this
work with OpenSSL by calling RAND_bytes, which will use whatever OpenSSL
uses.  I'll work on that for a v2 to see if that will meet the needs for
your platform, and if not, I'll try something else.

That should also have the pleasant side effect of making this more
portable even for those people who do have less common platforms, since
OpenSSL will likely be an option there.
-- 
brian m. carlson (he/him or they/them)
Toronto, Ontario, CA

Attachments

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help