Hi everybody,
I am looking into Openssl1.0.1g source code and I have a question regarding
IV vector initialization with random bytes in do_ssl3_write function.
I am referring to the following code in do_ssl3_write:
wr->input=p;
wr->data=p;
if (eivlen)
{
/* if (RAND_pseudo_bytes(p, eivlen) <= 0)
goto err; */
wr->length += eivlen;
}
/* ssl3_enc can only have an error on read */
s->method->ssl3_enc->enc(s,1);
My question is why call for RAND_pseudo_bytes is commented out?
I am not an expert in cryptography but my understanding that Initialization
Vector should be filled with random bytes to prevents repetition in data
encryption.
Could you please clarify?
Best regards,
Denis