Correct maximum request length. SP800-90 quotes maximum bits, not bytes.

diff --git a/fips/rand/fips_drbg_ctr.c b/fips/rand/fips_drbg_ctr.c
index a7f5b467537de0cae51ba5cf02ab0f46cf9430f6..47abec651d6f305e75f6c434e88108d1ff143297 100644 (file)
--- a/fips/rand/fips_drbg_ctr.c
+++ b/fips/rand/fips_drbg_ctr.c
@@ -429,7 +429,7 @@ int fips_drbg_ctr_init(DRBG_CTX *dctx)
                dctx->max_adin = dctx->seedlen;
                }
 
-       dctx->max_request = 1<<19;
+       dctx->max_request = 1<<16;
        dctx->reseed_interval = 1<<24;
 
        return 1;

diff --git a/fips/rand/fips_drbg_hash.c b/fips/rand/fips_drbg_hash.c
index 481b356ec6ff3c35f65e164a4237cf8693acf876..07873ca02dc4eae71dc9e781e3b591f510d95cfc 100644 (file)
--- a/fips/rand/fips_drbg_hash.c
+++ b/fips/rand/fips_drbg_hash.c
@@ -371,7 +371,7 @@ int fips_drbg_hash_init(DRBG_CTX *dctx)
        dctx->max_pers = DRBG_MAX_LENGTH;
        dctx->max_adin = DRBG_MAX_LENGTH;
 
-       dctx->max_request = 1<<19;
+       dctx->max_request = 1<<16;
        dctx->reseed_interval = 1<<24;
 
        return 1;

diff --git a/fips/rand/fips_drbg_hmac.c b/fips/rand/fips_drbg_hmac.c
index bf10609deea4ac19aa8e11a324141f75be3dd498..7733386b92ea7bf633d35963d2d5a996042ef2c4 100644 (file)
--- a/fips/rand/fips_drbg_hmac.c
+++ b/fips/rand/fips_drbg_hmac.c
@@ -274,7 +274,7 @@ int fips_drbg_hmac_init(DRBG_CTX *dctx)
         dctx->max_pers = DRBG_MAX_LENGTH;
         dctx->max_adin = DRBG_MAX_LENGTH;
 
-        dctx->max_request = 1<<19;
+        dctx->max_request = 1<<16;
         dctx->reseed_interval = 1<<24;
 
        return 1;