Correct maximum request length. SP800-90 quotes maximum bits, not bytes.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 19 Aug 2011 23:25:10 +0000 (23:25 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 19 Aug 2011 23:25:10 +0000 (23:25 +0000)
fips/rand/fips_drbg_ctr.c
fips/rand/fips_drbg_hash.c
fips/rand/fips_drbg_hmac.c

index a7f5b46..47abec6 100644 (file)
@@ -429,7 +429,7 @@ int fips_drbg_ctr_init(DRBG_CTX *dctx)
                dctx->max_adin = dctx->seedlen;
                }
 
-       dctx->max_request = 1<<19;
+       dctx->max_request = 1<<16;
        dctx->reseed_interval = 1<<24;
 
        return 1;
index 481b356..07873ca 100644 (file)
@@ -371,7 +371,7 @@ int fips_drbg_hash_init(DRBG_CTX *dctx)
        dctx->max_pers = DRBG_MAX_LENGTH;
        dctx->max_adin = DRBG_MAX_LENGTH;
 
-       dctx->max_request = 1<<19;
+       dctx->max_request = 1<<16;
        dctx->reseed_interval = 1<<24;
 
        return 1;
index bf10609..7733386 100644 (file)
@@ -274,7 +274,7 @@ int fips_drbg_hmac_init(DRBG_CTX *dctx)
         dctx->max_pers = DRBG_MAX_LENGTH;
         dctx->max_adin = DRBG_MAX_LENGTH;
 
-        dctx->max_request = 1<<19;
+        dctx->max_request = 1<<16;
         dctx->reseed_interval = 1<<24;
 
        return 1;