doc: explicitly state that rng self_test mustn't require rng initialization

2 files changed, 3 insertions, 2 deletions

diff --git a/lib/crypto-backend.h b/lib/crypto-backend.h
index 6f4b743b88..1619bf0fa5 100644
--- a/lib/crypto-backend.h
+++ b/lib/crypto-backend.h
@@ -77,7 +77,7 @@ typedef struct gnutls_crypto_rnd {
 	int (*rnd) (void *ctx, int level, void *data, size_t datasize);
 	void (*rnd_refresh) (void *ctx);
 	void (*deinit) (void *ctx);
-	int (*self_test) (void);
+	int (*self_test) (void); /* this should not require rng initialization */
 } gnutls_crypto_rnd_st;
 
 typedef void *bigint_t;
diff --git a/lib/fips.c b/lib/fips.c
index 8a0ada34bc..677c047b7b 100644
--- a/lib/fips.c
+++ b/lib/fips.c
@@ -350,7 +350,8 @@ int _gnutls_fips_perform_self_checks2(void)
 		gnutls_assert();
 		goto error;
 	}
-	
+
+	/* this does not require rng initialization */
 	ret = _gnutls_rnd_ops.self_test();
 	if (ret < 0) {
 		gnutls_assert();