From 406d25878c4042fc326fd2dc60f95bb3845e225c Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Thu, 3 Oct 2019 14:31:22 +0200 Subject: [PATCH] Add a note about CTR_DRBG security strength to config.h --- include/mbedtls/config.h | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h index fa88ebf01..0bc08cca4 100644 --- a/include/mbedtls/config.h +++ b/include/mbedtls/config.h @@ -1884,6 +1884,10 @@ * * Enable the CTR_DRBG AES-256-based random generator. * + * \note This module only achieves a 256-bit security strength if + * the generator is seeded with sufficient entropy. + * See ctr_drbg.h for more details. + * * Module: library/ctr_drbg.c * Caller: *