Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 1 | /** |
| 2 | * \file random.c |
| 3 | * |
| 4 | * \brief This file contains the helper functions to generate random numbers |
| 5 | * for the purpose of testing. |
| 6 | */ |
| 7 | |
Bence Szépkúti | 8697465 | 2020-06-15 11:59:37 +0200 | [diff] [blame] | 8 | /* |
Bence Szépkúti | 1e14827 | 2020-08-07 13:07:28 +0200 | [diff] [blame] | 9 | * Copyright The Mbed TLS Contributors |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 10 | * SPDX-License-Identifier: Apache-2.0 |
| 11 | * |
| 12 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 13 | * not use this file except in compliance with the License. |
| 14 | * You may obtain a copy of the License at |
| 15 | * |
| 16 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 17 | * |
| 18 | * Unless required by applicable law or agreed to in writing, software |
| 19 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 20 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 21 | * See the License for the specific language governing permissions and |
| 22 | * limitations under the License. |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 23 | */ |
| 24 | |
gufe44 | c54888e | 2020-08-17 15:04:06 +0200 | [diff] [blame] | 25 | /* |
| 26 | * for arc4random_buf() from <stdlib.h> |
| 27 | */ |
| 28 | #if defined(__NetBSD__) |
| 29 | #define _NETBSD_SOURCE 1 |
| 30 | #elif defined(__OpenBSD__) |
| 31 | #define _BSD_SOURCE 1 |
| 32 | #endif |
| 33 | |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 34 | #include <test/macros.h> |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 35 | #include <test/random.h> |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 36 | #include <string.h> |
| 37 | |
Gilles Peskine | ecacc3c | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 38 | #include <mbedtls/entropy.h> |
Dave Rodgman | d51b1c5 | 2023-03-10 17:44:08 +0000 | [diff] [blame] | 39 | #include "../../library/alignment.h" |
Gilles Peskine | ecacc3c | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 40 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 41 | int mbedtls_test_rnd_std_rand(void *rng_state, |
| 42 | unsigned char *output, |
| 43 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 44 | { |
gufe44 | c2620da | 2020-08-03 17:56:50 +0200 | [diff] [blame] | 45 | #if !defined(__OpenBSD__) && !defined(__NetBSD__) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 46 | size_t i; |
| 47 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 48 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 49 | rng_state = NULL; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 50 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 51 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 52 | for (i = 0; i < len; ++i) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 53 | output[i] = rand(); |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 54 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 55 | #else |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 56 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 57 | rng_state = NULL; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 58 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 59 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 60 | arc4random_buf(output, len); |
gufe44 | c2620da | 2020-08-03 17:56:50 +0200 | [diff] [blame] | 61 | #endif /* !OpenBSD && !NetBSD */ |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 62 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 63 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 64 | } |
| 65 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 66 | int mbedtls_test_rnd_zero_rand(void *rng_state, |
| 67 | unsigned char *output, |
| 68 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 69 | { |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 70 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 71 | rng_state = NULL; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 72 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 73 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 74 | memset(output, 0, len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 75 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 76 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 77 | } |
| 78 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 79 | int mbedtls_test_rnd_buffer_rand(void *rng_state, |
| 80 | unsigned char *output, |
| 81 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 82 | { |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 83 | mbedtls_test_rnd_buf_info *info = (mbedtls_test_rnd_buf_info *) rng_state; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 84 | size_t use_len; |
| 85 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 86 | if (rng_state == NULL) { |
| 87 | return mbedtls_test_rnd_std_rand(NULL, output, len); |
| 88 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 89 | |
| 90 | use_len = len; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 91 | if (len > info->length) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 92 | use_len = info->length; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 93 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 94 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 95 | if (use_len) { |
| 96 | memcpy(output, info->buf, use_len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 97 | info->buf += use_len; |
| 98 | info->length -= use_len; |
| 99 | } |
| 100 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 101 | if (len - use_len > 0) { |
| 102 | if (info->fallback_f_rng != NULL) { |
| 103 | return info->fallback_f_rng(info->fallback_p_rng, |
| 104 | output + use_len, |
| 105 | len - use_len); |
| 106 | } else { |
| 107 | return MBEDTLS_ERR_ENTROPY_SOURCE_FAILED; |
Gilles Peskine | ecacc3c | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 108 | } |
Gilles Peskine | ecacc3c | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 109 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 110 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 111 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 112 | } |
| 113 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 114 | int mbedtls_test_rnd_pseudo_rand(void *rng_state, |
| 115 | unsigned char *output, |
| 116 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 117 | { |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 118 | mbedtls_test_rnd_pseudo_info *info = |
| 119 | (mbedtls_test_rnd_pseudo_info *) rng_state; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 120 | uint32_t i, *k, sum, delta = 0x9E3779B9; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 121 | unsigned char result[4], *out = output; |
| 122 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 123 | if (rng_state == NULL) { |
| 124 | return mbedtls_test_rnd_std_rand(NULL, output, len); |
| 125 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 126 | |
| 127 | k = info->key; |
| 128 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 129 | while (len > 0) { |
| 130 | size_t use_len = (len > 4) ? 4 : len; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 131 | sum = 0; |
| 132 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 133 | for (i = 0; i < 32; i++) { |
| 134 | info->v0 += (((info->v1 << 4) ^ (info->v1 >> 5)) |
| 135 | + info->v1) ^ (sum + k[sum & 3]); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 136 | sum += delta; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 137 | info->v1 += (((info->v0 << 4) ^ (info->v0 >> 5)) |
| 138 | + info->v0) ^ (sum + k[(sum>>11) & 3]); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 139 | } |
| 140 | |
Dave Rodgman | d51b1c5 | 2023-03-10 17:44:08 +0000 | [diff] [blame] | 141 | MBEDTLS_PUT_UINT32_BE(info->v0, result, 0); |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 142 | memcpy(out, result, use_len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 143 | len -= use_len; |
| 144 | out += 4; |
| 145 | } |
| 146 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 147 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 148 | } |