RAND_pseudo_bytes is good enough for encryption IVs,

we should not need RAND_bytes (and we cannot use the latter
unless we load a seed file)

diff --git a/apps/enc.c b/apps/enc.c
index 6c93e1722daaadbbb87c4ad13361a459045c5e6f..842036697c30631611ce8f7aae3fa030e431fd09 100644 (file)
--- a/apps/enc.c
+++ b/apps/enc.c
@@ -448,11 +448,8 @@ bad:
                                                                "invalid hex salt value\n");
                                                        goto end;
                                                }
-                                       } else if (RAND_bytes(salt, PKCS5_SALT_LEN) <= 0) {
-                                               BIO_printf(bio_err,
-                                                       "prng not seeded\n");
+                                       } else if (RAND_pseudo_bytes(salt, PKCS5_SALT_LEN) <= 0)
                                                goto end;
-                                       }
                                        /* If -P option then don't bother writing */
                                        if((printkey != 2)
                                           && (BIO_write(wbio,magic,