From ebdf37e4b1cf6e84dbbf031bdfab96206d3a6761 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Sun, 19 Oct 2014 01:28:41 +0100 Subject: [PATCH] remove FIPS module code from crypto/bn Reviewed-by: Tim Hudson --- crypto/bn/bn_rand.c | 8 -------- 1 file changed, 8 deletions(-) diff --git a/crypto/bn/bn_rand.c b/crypto/bn/bn_rand.c index d550f497d9..7c0ec5153d 100644 --- a/crypto/bn/bn_rand.c +++ b/crypto/bn/bn_rand.c @@ -248,15 +248,7 @@ static int bn_rand_range(int pseudo, BIGNUM *r, const BIGNUM *range) if (n == 1) BN_zero(r); -#ifdef OPENSSL_FIPS - /* FIPS 186-3 is picky about how random numbers for keys etc are - * generated. So we just use the second case which is equivalent to - * "Generation by Testing Candidates" mentioned in B.1.2 et al. - */ - else if (!FIPS_module_mode() && !BN_is_bit_set(range, n - 2) && !BN_is_bit_set(range, n - 3)) -#else else if (!BN_is_bit_set(range, n - 2) && !BN_is_bit_set(range, n - 3)) -#endif { /* range = 100..._2, * so 3*range (= 11..._2) is exactly one bit longer than range */ -- 2.34.1