Re: RAND_bytes() returns zero in pre-boot environment

2013-08-13 Thread baban devkate
Issue is fixed. FYI- As I am working on pre-boot, no OS is present. Which was resulting in no seeding. RAND_seed() has been called before using RAND_bytes(). Here is the code snippet. static const char rnd_seed[] = "string to make the random number generator think it has entropy"; RAND_seed(rnd_

Best Practices CA manage

2013-08-13 Thread redpath
I have a best practices question on CA management for signing. I have created CA signing cert and issue all other certs using this CA to sign them. 1) I noticed that many CA examples set a term of 3650 days, is this commmon practice 2) If I decide to revoke the CA and create a new CA what is th

Re: RAND_bytes() returns zero in pre-boot environment

2013-08-13 Thread baban devkate
FYI - RAND_bytes(buf, bytes) receives correct parameters as bytes=256 for SHA256. int RAND_bytes(unsigned char *buf, int num) { const RAND_METHOD *meth = RAND_get_rand_method(); if (meth && meth->bytes) { Print(L" control is here\n");/<---controll is here return meth->bytes(buf,num); }

RAND_bytes() returns zero in pre-boot environment

2013-08-13 Thread baban devkate
Hello, RAND_bytes() will use the proper OS-provided RNG e.g. /dev/urandom or /dev/randomon Linux and CryptGenRandom() on Windows. I want to know how it works in Pre-boot environement? In pre-boot environment, if RAND_bytes() returns zero then what does it mean? Is it because PRNG is not properl