tree ac1b16fff08607dfbf0b903a354db4360bf3e1a1
parent e215a4d05ecf874cb3a2f35120b7755742672a7d
author Gilles Peskine <Gilles.Peskine@arm.com> 1570105324 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1570206305 +0200

mbedtls_ctr_drbg_set_entropy_len() only matters when reseeding

The documentation of CTR_DRBG erroneously claimed that
mbedtls_ctr_drbg_set_entropy_len() had an impact on the initial
seeding. This is in fact not the case: mbedtls_ctr_drbg_seed() forces
the initial seeding to grab MBEDTLS_CTR_DRBG_ENTROPY_LEN bytes of
entropy. Fix the documentation and rewrite the discussion of the
entropy length and the security strength accordingly.