From 4d0381055c5ff5ef750599fe177b17395dc9b8e8 Mon Sep 17 00:00:00 2001
From: Ondrej Mikle <ondrej.mikle@gmail.com>
Date: Tue, 21 Mar 2023 15:17:24 +0100
Subject: [PATCH] fix(crypto): adapt to changing insecure PRNG to be opt-in

---
 core/.changelog.d/2899.fixed | 1 +
 crypto/Makefile              | 1 +
 2 files changed, 2 insertions(+)
 create mode 100644 core/.changelog.d/2899.fixed

diff --git a/core/.changelog.d/2899.fixed b/core/.changelog.d/2899.fixed
new file mode 100644
index 000000000..0e33582cd
--- /dev/null
+++ b/core/.changelog.d/2899.fixed
@@ -0,0 +1 @@
+Fix RNG for bootloader and make insecure PRNG opt-in, not opt-out.
diff --git a/crypto/Makefile b/crypto/Makefile
index b6dbeeedb..9e5c80e34 100644
--- a/crypto/Makefile
+++ b/crypto/Makefile
@@ -82,6 +82,7 @@ CFLAGS += -DUSE_KECCAK=1
 CFLAGS += -DUSE_MONERO=1
 CFLAGS += -DUSE_NEM=1
 CFLAGS += -DUSE_CARDANO=1
+CFLAGS += -DUSE_INSECURE_PRNG=1
 CFLAGS += $(shell pkg-config --cflags openssl)
 
 # disable certain optimizations and features when small footprint is required