DRBG: make the derivation function the default for ctr_drbg

[openssl.git] / include / internal / rand.h

diff --git a/include/internal/rand.h b/include/internal/rand.h
index 1dde659716b1ecf467d22b6047bd4679b5c0a456..8d3e4528ba9d3f30bd7cac19c1d2c2dc0241b4ff 100644 (file)
--- a/include/internal/rand.h
+++ b/include/internal/rand.h
@@ -10,8 +10,8 @@
 #ifndef HEADER_DRBG_RAND_H
 # define HEADER_DRBG_RAND_H
 
-/* In CTR mode, use derivation function ctr_df */
-#define RAND_DRBG_FLAG_CTR_USE_DF            0x2
+/* In CTR mode, disable derivation function ctr_df */
+#define RAND_DRBG_FLAG_CTR_NO_DF            0x1
 
 /*
  * Default security strength (in the sense of [NIST SP 800-90Ar1])