Increase ENTROPY_NEEDED to support Rijndael's larger key size.

diff --git a/CHANGES b/CHANGES
index a3292d244d8b2c75698407c39aaab63f221ddeac..f3f345ac10a5c8840ece18d2ad87427ac4f50bc7 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -11,6 +11,9 @@
          *) applies to 0.9.6a (/0.9.6b) and 0.9.7
          +) applies to 0.9.7 only
 
+  +) Increase ENTROPY_NEEDED to 32 bytes, as Rijndael can operate with
+     256 bit (=32 byte) keys. Of course seeding with more entropy bytes
+     than this minimum value is recommended.
 
   +) New random seeder for OpenVMS, using the system process statistics
      that are easily reachable.

diff --git a/crypto/rand/rand_lcl.h b/crypto/rand/rand_lcl.h
index 866eebeffce78a48a8d852ba3abbfacac5ea581a..1d9670738ea22d7a37d945e223de43a9843edf81 100644 (file)
--- a/crypto/rand/rand_lcl.h
+++ b/crypto/rand/rand_lcl.h
@@ -112,7 +112,7 @@
 #ifndef HEADER_RAND_LCL_H
 #define HEADER_RAND_LCL_H
 
-#define ENTROPY_NEEDED 20  /* require 160 bits = 20 bytes of randomness */
+#define ENTROPY_NEEDED 32  /* require 256 bits = 32 bytes of randomness */
 
 
 #if !defined(USE_MD5_RAND) && !defined(USE_SHA1_RAND) && !defined(USE_MDC2_RAND) && !defined(USE_MD2_RAND)