On Wed, Jul 25, 2018 at 11:42:34PM +0530, Sudarshan Soma wrote:
> Now few applications are using libc rand function. For FIPS compliance,
> applications have to call approved SP 800-90A DRBG implementation.
If you're using libc's rand() for non-cryptographic purposes, you
can surely continue to do that.
> I was planning to replace libc rand with RAND_bytes for the same.
>
> But rand() returns max value of 32767. Is there a recomended way to
> convert RAND_bytes to libc rand() something like this?
Since 16-bit random numbers do not provide any meaningful security,
it makes little sense to use a CSPRNG in a context where 16-bit
random values are sufficient.
> Please suggest. Is there a way to give number of bits instead of bytes to
> RAND_bytes?
This is probably the wrong question.
--
Viktor.
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
