Adam Langley
8ef8f5838a
Upcoming NIST rule changes are expected to effectively require us to pass in larger entropy inputs to the DRBG, which requires us to use the "derivation function" option from 800-90A. This change implements the derivation function and splits the entropy and nonce arguments out, as needed for this style of DRBG. Since we have external users of the existing CTR-DRBG mode, that is still supported, but all internal uses will now use a derivation function. Change-Id: I8079e9f4c6238e91c68fef1e40189211f4142555 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/79768 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com>