tfpf/hash-drbg

Cryptographically secure pseudorandom number generator for C, C++ and Python with global-state (thread-unsafe) and thread-safe variants, implementing NIST SP 800-90A. Provided as an installable package.

hash-drbg's Issues

If OpenSSL is installed, it should possible to use its SHA-256 implementation.

I observed that using the SHA-256 implementation of OpenSSL speeds up hdrbg_init and hdrbg_fill on Debian (WSL), Mint and Manjaro. On MSYS2, however, it slows them down!

Regardless, there should be an installation flag which allows users to choose which SHA-256 implementation they want to use. If they go for the OpenSSL implementation but it isn't available, it should fall back to my implementation.

(I have actually already made the required changes, but have moved them to another branch because pkg-config on MSYS2 does not correctly indicate whether OpenSSL is installed: pkg-config --libs openssl outputs -lssl -lcrypto even when openssl-devel is not installed, so linking the shared library fails. I should figure out a way to do this using CMake.)