commit 7f8762c0ed20f5d51eb43003eae3bb6cff2cd164 Author: Sami Farin Date: Wed Sep 25 16:25:56 2013 +0300 disable fips_drbg_ec_init (NSA backdoor aka Dual-EC-DRBG) diff --git a/fips/rand/fips_drbg_lib.c b/fips/rand/fips_drbg_lib.c index ee162d0..bb2e168 100644 --- a/fips/rand/fips_drbg_lib.c +++ b/fips/rand/fips_drbg_lib.c @@ -79,8 +79,6 @@ int FIPS_drbg_init(DRBG_CTX *dctx, int type, unsigned int flags) rv = fips_drbg_ctr_init(dctx); if (rv == -2) rv = fips_drbg_hmac_init(dctx); - if (rv == -2) - rv = fips_drbg_ec_init(dctx); if (rv <= 0) {