openssl: Current master does not load RDRAND engine by default?

$ openssl3 version
OpenSSL 3.1.0-dev  (Library: OpenSSL 3.1.0-dev )
$ openssl rand -hex 16
$ openssl rand -engine rdrand  -hex 16
Engine "rdrand" set.
ac91a3fbbfda96c49b82316d3b6a301d
$

OpenSSL-1.1.1 seemed to have no problem finding RDRAND engine:

$ openssl11 version
OpenSSL 1.1.1l  24 Aug 2021
$ openssl11 rand -hex 16
1ddc8ecf8b358bd899744a35c2796d86
$

Needless to say, I want/need RDRAND engine to be loaded by default (in 3.+). What do I need to do with openssl.cnf to get it?

About this issue

Original URL
State: closed
Created 3 years ago
Comments: 23 (23 by maintainers)

Most upvoted comments

Removing that binding alleviated the problem.

mouse07410 on Nov 14, 2021

Be careful if using rand from card if card used for login. That might lead an attack on your system.

On Tue, Nov 9, 2021, 10:36 PM Pauli @.***> wrote:

Phew! This makes some kind of sense.

I’m guessing the PKCS#11 engine is installing a default randomness source. This will override the built-in sources. I’d not even considered this possibility. Good sleuthing.

Adding the command line option will add the rdrand source over the top.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/openssl/openssl/issues/16996#issuecomment-964779367, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAGTIMKN52U23C7AKLQ3VZLULHZGJANCNFSM5HULNFVQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

dengert on Nov 10, 2021

Phew! This makes some kind of sense.

I’m guessing the PKCS#11 engine is installing a default randomness source. This will override the built-in sources. I’d not even considered this possibility. Good sleuthing.

Adding the command line option will add the rdrand source over the top.

paulidale on Nov 10, 2021