From: Dr. Stephen Henson Date: Sun, 19 Oct 2014 00:28:41 +0000 (+0100) Subject: remove FIPS module code from crypto/bn X-Git-Tag: master-pre-reformat~147 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=ebdf37e4b1cf6e84dbbf031bdfab96206d3a6761;p=openssl remove FIPS module code from crypto/bn Reviewed-by: Tim Hudson --- diff --git a/crypto/bn/bn_rand.c b/crypto/bn/bn_rand.c index d550f497d9..7c0ec5153d 100644 --- a/crypto/bn/bn_rand.c +++ b/crypto/bn/bn_rand.c @@ -248,15 +248,7 @@ static int bn_rand_range(int pseudo, BIGNUM *r, const BIGNUM *range) if (n == 1) BN_zero(r); -#ifdef OPENSSL_FIPS - /* FIPS 186-3 is picky about how random numbers for keys etc are - * generated. So we just use the second case which is equivalent to - * "Generation by Testing Candidates" mentioned in B.1.2 et al. - */ - else if (!FIPS_module_mode() && !BN_is_bit_set(range, n - 2) && !BN_is_bit_set(range, n - 3)) -#else else if (!BN_is_bit_set(range, n - 2) && !BN_is_bit_set(range, n - 3)) -#endif { /* range = 100..._2, * so 3*range (= 11..._2) is exactly one bit longer than range */