tree 8f3cda37e47db2c1eec83222cea4de9bfece0866
parent 7e27936767c1b018057c83f72246edeabe888fba
author Gilles Peskine <Gilles.Peskine@arm.com> 1570105324 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1570206839 +0200

mbedtls_ctr_drbg_set_entropy_len() only matters when reseeding

The documentation of CTR_DRBG erroneously claimed that
mbedtls_ctr_drbg_set_entropy_len() had an impact on the initial
seeding. This is in fact not the case: mbedtls_ctr_drbg_seed() forces
the initial seeding to grab MBEDTLS_CTR_DRBG_ENTROPY_LEN bytes of
entropy. Fix the documentation and rewrite the discussion of the
entropy length and the security strength accordingly.