You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Shared DRBG used without a lock: duplicate keys and nonce reuse under threads #89
On wolfSSL < 5.9.4 / FIPS < v7, the wrapper's shared priv_rng is used from multiple threads without a lock. Concurrent key generation produces duplicate keys and nonce reuse; we have also seen a permanent hang in threaded first-use RSA keygen.
Fix and reproducer: #86 (closed in favour of this issue). The fix ships in our FIPS-eval channel packages.
Activity