Use deterministic ECDSA in the PK layer
diff --git a/library/pk_wrap.c b/library/pk_wrap.c
index eb87d3c..3f05edd 100644
--- a/library/pk_wrap.c
+++ b/library/pk_wrap.c
@@ -303,10 +303,19 @@
unsigned char *sig, size_t *sig_len,
int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
{
+ /* Use deterministic ECDSA by default if available */
+#if defined(POLARSSL_ECDSA_DETERMINISTIC)
+ ((void) f_rng);
+ ((void) p_rng);
+
+ return( ecdsa_write_signature_det( (ecdsa_context *) ctx,
+ hash, hash_len, sig, sig_len, md_alg ) );
+#else
((void) md_alg);
return( ecdsa_write_signature( (ecdsa_context *) ctx,
hash, hash_len, sig, sig_len, f_rng, p_rng ) );
+#endif
}
static void *ecdsa_alloc_wrap( void )
