[gnutls-help] 'continuous random number generator test in 4.9.2' ?

jonetsu jonetsu at teksavvy.com
Fri Jul 15 23:40:20 CEST 2016


Hello,

I would like to find out how the RNG test is organized.  The following statement in nettle/int/drbg-aes.c is puzzling:

At line 147:

    /* Throw the first block generated. FIPS 140-2 requirement (see 
     * the continuous random number generator test in 4.9.2)
     */
    if (ctx->prev_block_present == 0) {
        INCREMENT(sizeof(ctx->v), ctx->v);
        aes_encrypt(&ctx->key, AES_BLOCK_SIZE, ctx->prev_block, ctx->v);

        ctx->prev_block_present = 1;
    }

What does '4.9.2' mean ?

Thanks.






More information about the Gnutls-help mailing list