From 84d14408bfa1adc56bb172f0ee0badb5a7919f34 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bodo=20M=C3=B6ller?= <bodo@openssl.org>
Date: Thu, 2 Mar 2000 22:44:55 +0000
Subject: [PATCH] Use RAND_pseudo_bytes, not RAND_bytes, for IVs/salts.

---
 CHANGES | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGES b/CHANGES
index e3d8337f4b..bd9a73c281 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@
 
  Changes between 0.9.5 and 0.9.6  [XX XXX 2000]
 
+  *) In PEM_ASN1_write_bio and some other functions, use RAND_pseudo_bytes
+     instead of RAND_bytes for encryption IVs and salts.
+     [Bodo Moeller]
+
   *) Include RAND_status() into RAND_METHOD instead of implementing
      it only for md_rand.c  Otherwise replacing the PRNG by calling
      RAND_set_rand_method would be impossible.
-- 
GitLab