tree 0f8b6d004f5c273dad39db9bad2d24b8e2773cfd
parent 90ada2f4ec66fac971ec87f9c63bf716174a9211
author David Benjamin <davidben@google.com> 1492116223 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1492199389 +0000

Align BN_rand_range_ex with FIPS 186-4.

Rather than comparing against both min and max, FIPS prefers comparing
with max - min and adding min. It also does not believe in using
3*range. Align with it, though our old algorithm trivially produces the
same probability distribution on values.

Change-Id: I447cc3608b92ba93706489d702b8d6a68047f491
Reviewed-on: https://boringssl-review.googlesource.com/15045
Reviewed-by: Adam Langley <agl@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>