Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 1 | /** |
| 2 | * \file random.c |
| 3 | * |
| 4 | * \brief This file contains the helper functions to generate random numbers |
| 5 | * for the purpose of testing. |
| 6 | */ |
| 7 | |
Bence Szépkúti | 8697465 | 2020-06-15 11:59:37 +0200 | [diff] [blame] | 8 | /* |
Bence Szépkúti | 1e14827 | 2020-08-07 13:07:28 +0200 | [diff] [blame] | 9 | * Copyright The Mbed TLS Contributors |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 10 | * SPDX-License-Identifier: Apache-2.0 |
| 11 | * |
| 12 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 13 | * not use this file except in compliance with the License. |
| 14 | * You may obtain a copy of the License at |
| 15 | * |
| 16 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 17 | * |
| 18 | * Unless required by applicable law or agreed to in writing, software |
| 19 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 20 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 21 | * See the License for the specific language governing permissions and |
| 22 | * limitations under the License. |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 23 | */ |
| 24 | |
gufe44 | c54888e | 2020-08-17 15:04:06 +0200 | [diff] [blame] | 25 | /* |
| 26 | * for arc4random_buf() from <stdlib.h> |
| 27 | */ |
| 28 | #if defined(__NetBSD__) |
| 29 | #define _NETBSD_SOURCE 1 |
| 30 | #elif defined(__OpenBSD__) |
| 31 | #define _BSD_SOURCE 1 |
| 32 | #endif |
| 33 | |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 34 | #include <test/macros.h> |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 35 | #include <test/random.h> |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 36 | #include <string.h> |
| 37 | |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 38 | #include <mbedtls/entropy.h> |
| 39 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 40 | int mbedtls_test_rnd_std_rand(void *rng_state, |
| 41 | unsigned char *output, |
| 42 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 43 | { |
gufe44 | c2620da | 2020-08-03 17:56:50 +0200 | [diff] [blame] | 44 | #if !defined(__OpenBSD__) && !defined(__NetBSD__) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 45 | size_t i; |
| 46 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 47 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 48 | rng_state = NULL; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 49 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 50 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 51 | for (i = 0; i < len; ++i) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 52 | output[i] = rand(); |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 53 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 54 | #else |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 55 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 56 | rng_state = NULL; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 57 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 58 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 59 | arc4random_buf(output, len); |
gufe44 | c2620da | 2020-08-03 17:56:50 +0200 | [diff] [blame] | 60 | #endif /* !OpenBSD && !NetBSD */ |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 61 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 62 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 63 | } |
| 64 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 65 | int mbedtls_test_rnd_zero_rand(void *rng_state, |
| 66 | unsigned char *output, |
| 67 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 68 | { |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 69 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 70 | rng_state = NULL; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 71 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 72 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 73 | memset(output, 0, len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 74 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 75 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 76 | } |
| 77 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 78 | int mbedtls_test_rnd_buffer_rand(void *rng_state, |
| 79 | unsigned char *output, |
| 80 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 81 | { |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 82 | mbedtls_test_rnd_buf_info *info = (mbedtls_test_rnd_buf_info *) rng_state; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 83 | size_t use_len; |
| 84 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 85 | if (rng_state == NULL) { |
| 86 | return mbedtls_test_rnd_std_rand(NULL, output, len); |
| 87 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 88 | |
| 89 | use_len = len; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 90 | if (len > info->length) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 91 | use_len = info->length; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 92 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 93 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 94 | if (use_len) { |
| 95 | memcpy(output, info->buf, use_len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 96 | info->buf += use_len; |
| 97 | info->length -= use_len; |
| 98 | } |
| 99 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 100 | if (len - use_len > 0) { |
| 101 | if (info->fallback_f_rng != NULL) { |
| 102 | return info->fallback_f_rng(info->fallback_p_rng, |
| 103 | output + use_len, |
| 104 | len - use_len); |
| 105 | } else { |
| 106 | return MBEDTLS_ERR_ENTROPY_SOURCE_FAILED; |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 107 | } |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 108 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 109 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 110 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 111 | } |
| 112 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 113 | int mbedtls_test_rnd_pseudo_rand(void *rng_state, |
| 114 | unsigned char *output, |
| 115 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 116 | { |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 117 | mbedtls_test_rnd_pseudo_info *info = |
| 118 | (mbedtls_test_rnd_pseudo_info *) rng_state; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 119 | uint32_t i, *k, sum, delta = 0x9E3779B9; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 120 | unsigned char result[4], *out = output; |
| 121 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 122 | if (rng_state == NULL) { |
| 123 | return mbedtls_test_rnd_std_rand(NULL, output, len); |
| 124 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 125 | |
| 126 | k = info->key; |
| 127 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 128 | while (len > 0) { |
| 129 | size_t use_len = (len > 4) ? 4 : len; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 130 | sum = 0; |
| 131 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 132 | for (i = 0; i < 32; i++) { |
| 133 | info->v0 += (((info->v1 << 4) ^ (info->v1 >> 5)) |
| 134 | + info->v1) ^ (sum + k[sum & 3]); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 135 | sum += delta; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 136 | info->v1 += (((info->v0 << 4) ^ (info->v0 >> 5)) |
| 137 | + info->v0) ^ (sum + k[(sum>>11) & 3]); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 138 | } |
| 139 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 140 | PUT_UINT32_BE(info->v0, result, 0); |
| 141 | memcpy(out, result, use_len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 142 | len -= use_len; |
| 143 | out += 4; |
| 144 | } |
| 145 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 146 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 147 | } |