It seems that the 0.9.8-era FIPS_rand_set_key() and FIPS_rand_seed() APIs have 
been removed from the 1.0.1-era FIPS Object Module.  Are there replacements for 
these APIs?  If so, what are they?

I used to use them after my FIPS-mode application forked to reset the entropy 
state in the child process:

0) Put the parent process in FIPS mode.
1) RAND_bytes(buf, 48);
2) fork();
3) if child and if in FIPS mode, FIPS_rand_set_key(buf, 32) and 
FIPS_rand_seed(buf+32, 16);

How does one do this type of thing now-a-days?  Does the child process still 
need to be reseeded after the fork?

What is the RAND_init_fips() API for?

Thanks.

Reply via email to