Security-59306.101.1.tar.gz

[apple/security.git] / OSX / libsecurity_keychain / lib / SecWrappedKeys.cpp

diff --git a/OSX/libsecurity_keychain/lib/SecWrappedKeys.cpp b/OSX/libsecurity_keychain/lib/SecWrappedKeys.cpp
index e42f34c2d755f36fb877f75430bec907df1fe074..83b8db377a3a2aa6d0e9c57fa5dbe608690ab652 100644 (file)
--- a/OSX/libsecurity_keychain/lib/SecWrappedKeys.cpp
+++ b/OSX/libsecurity_keychain/lib/SecWrappedKeys.cpp
@@ -33,7 +33,6 @@
 #include <Security/SecKeyPriv.h>
 #include <security_asn1/SecNssCoder.h>
 #include <security_cdsa_utils/cuCdsaUtils.h>
-#include <security_utilities/devrandom.h>
 
 #include <assert.h>
 
@@ -377,7 +376,6 @@ OSStatus impExpWrappedKeyOpenSslExport(
        const char                                                      **pemHeader,    // RETURNED
        CFArrayRef                                                      *pemParamLines) // RETURNED
 {
-       DevRandomGenerator              rng;
        SecNssCoder                             coder;
        CSSM_CSP_HANDLE                 cspHand = 0;
        OSStatus                                ortn;
@@ -405,8 +403,8 @@ OSStatus impExpWrappedKeyOpenSslExport(
        /* 8 bytes of random IV/salt */
        uint8 saltIv[8];
        CSSM_DATA saltIvData = { 8, saltIv} ;
-       rng.random(saltIv, 8);
-       
+    MacOSError::check(SecRandomCopyBytes(kSecRandomDefault, sizeof(saltIv), saltIv));
+    
        /* derive wrapping key */
        CSSM_KEY        wrappingKey;
        wrappingKey.KeyData.Data = NULL;