use generate_nonce() to generate a nonce, instead of reading from

/dev/urandom every time.
This commit is contained in:
gardners 2013-05-07 14:43:35 +09:30
parent dc49671583
commit d44e678a4e

View File

@ -696,9 +696,9 @@ int overlay_mdp_dispatch(overlay_mdp_frame *mdp,int userGeneratedFrameP,
unsigned char *cipher_text = nonce + nb;
if (!nonce)
RETURN(-1);
if (urandombytes(nonce,nb)) {
if (generate_nonce(nonce,nb)) {
op_free(frame);
RETURN(WHY("urandombytes() failed to generate nonce"));
RETURN(WHY("generate_nonce() failed to generate nonce"));
}
// reserve the high bit of the nonce as a flag for transmitting a shorter nonce.
nonce[0]&=0x7f;