Browse files

use X9.31 keygen by default in FIPS mode

Reviewed-by: Matt Caswell <>
  • Loading branch information...
snhenson committed Jul 29, 2015
1 parent 9e43fe9 commit d0c9a90640c8902fef3eb74e8ef05227f8e7dcb7
Showing with 3 additions and 1 deletion.
  1. +3 −1 crypto/rsa/rsa_gen.c
@@ -69,6 +69,8 @@
#include <openssl/rsa.h>
# include <openssl/fips.h>
extern int FIPS_rsa_x931_generate_key_ex(RSA *rsa, int bits, BIGNUM *e,
BN_GENCB *cb);
static int rsa_builtin_keygen(RSA *rsa, int bits, BIGNUM *e_value,
@@ -94,7 +96,7 @@ int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e_value, BN_GENCB *cb)
return rsa->meth->rsa_keygen(rsa, bits, e_value, cb);
if (FIPS_mode())
return FIPS_rsa_generate_key_ex(rsa, bits, e_value, cb);
return FIPS_rsa_x931_generate_key_ex(rsa, bits, e_value, cb);
return rsa_builtin_keygen(rsa, bits, e_value, cb);

0 comments on commit d0c9a90

Please sign in to comment.