Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 1 | /** |
| 2 | * \file random.c |
| 3 | * |
| 4 | * \brief This file contains the helper functions to generate random numbers |
| 5 | * for the purpose of testing. |
| 6 | */ |
| 7 | |
Bence Szépkúti | 8697465 | 2020-06-15 11:59:37 +0200 | [diff] [blame] | 8 | /* |
Bence Szépkúti | 1e14827 | 2020-08-07 13:07:28 +0200 | [diff] [blame] | 9 | * Copyright The Mbed TLS Contributors |
Dave Rodgman | 7ff7965 | 2023-11-03 12:04:52 +0000 | [diff] [blame] | 10 | * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 11 | */ |
| 12 | |
gufe44 | c54888e | 2020-08-17 15:04:06 +0200 | [diff] [blame] | 13 | /* |
| 14 | * for arc4random_buf() from <stdlib.h> |
| 15 | */ |
| 16 | #if defined(__NetBSD__) |
| 17 | #define _NETBSD_SOURCE 1 |
| 18 | #elif defined(__OpenBSD__) |
| 19 | #define _BSD_SOURCE 1 |
| 20 | #endif |
| 21 | |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 22 | #include <test/macros.h> |
Ronald Cron | b7eb67f | 2020-06-09 16:57:42 +0200 | [diff] [blame] | 23 | #include <test/random.h> |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 24 | #include <string.h> |
| 25 | |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 26 | #include <mbedtls/entropy.h> |
| 27 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 28 | int mbedtls_test_rnd_std_rand(void *rng_state, |
| 29 | unsigned char *output, |
| 30 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 31 | { |
gufe44 | c2620da | 2020-08-03 17:56:50 +0200 | [diff] [blame] | 32 | #if !defined(__OpenBSD__) && !defined(__NetBSD__) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 33 | size_t i; |
| 34 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 35 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 36 | rng_state = NULL; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 37 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 38 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 39 | for (i = 0; i < len; ++i) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 40 | output[i] = rand(); |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 41 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 42 | #else |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 43 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 44 | rng_state = NULL; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 45 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 46 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 47 | arc4random_buf(output, len); |
gufe44 | c2620da | 2020-08-03 17:56:50 +0200 | [diff] [blame] | 48 | #endif /* !OpenBSD && !NetBSD */ |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 49 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 50 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 51 | } |
| 52 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 53 | int mbedtls_test_rnd_zero_rand(void *rng_state, |
| 54 | unsigned char *output, |
| 55 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 56 | { |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 57 | if (rng_state != NULL) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 58 | rng_state = NULL; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 59 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 60 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 61 | memset(output, 0, len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 62 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 63 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 64 | } |
| 65 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 66 | int mbedtls_test_rnd_buffer_rand(void *rng_state, |
| 67 | unsigned char *output, |
| 68 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 69 | { |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 70 | mbedtls_test_rnd_buf_info *info = (mbedtls_test_rnd_buf_info *) rng_state; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 71 | size_t use_len; |
| 72 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 73 | if (rng_state == NULL) { |
| 74 | return mbedtls_test_rnd_std_rand(NULL, output, len); |
| 75 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 76 | |
| 77 | use_len = len; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 78 | if (len > info->length) { |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 79 | use_len = info->length; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 80 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 81 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 82 | if (use_len) { |
| 83 | memcpy(output, info->buf, use_len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 84 | info->buf += use_len; |
| 85 | info->length -= use_len; |
| 86 | } |
| 87 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 88 | if (len - use_len > 0) { |
| 89 | if (info->fallback_f_rng != NULL) { |
| 90 | return info->fallback_f_rng(info->fallback_p_rng, |
| 91 | output + use_len, |
| 92 | len - use_len); |
| 93 | } else { |
| 94 | return MBEDTLS_ERR_ENTROPY_SOURCE_FAILED; |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 95 | } |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame] | 96 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 97 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 98 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 99 | } |
| 100 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 101 | int mbedtls_test_rnd_pseudo_rand(void *rng_state, |
| 102 | unsigned char *output, |
| 103 | size_t len) |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 104 | { |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 105 | mbedtls_test_rnd_pseudo_info *info = |
| 106 | (mbedtls_test_rnd_pseudo_info *) rng_state; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 107 | uint32_t i, *k, sum, delta = 0x9E3779B9; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 108 | unsigned char result[4], *out = output; |
| 109 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 110 | if (rng_state == NULL) { |
| 111 | return mbedtls_test_rnd_std_rand(NULL, output, len); |
| 112 | } |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 113 | |
| 114 | k = info->key; |
| 115 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 116 | while (len > 0) { |
| 117 | size_t use_len = (len > 4) ? 4 : len; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 118 | sum = 0; |
| 119 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 120 | for (i = 0; i < 32; i++) { |
| 121 | info->v0 += (((info->v1 << 4) ^ (info->v1 >> 5)) |
| 122 | + info->v1) ^ (sum + k[sum & 3]); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 123 | sum += delta; |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 124 | info->v1 += (((info->v0 << 4) ^ (info->v0 >> 5)) |
| 125 | + info->v0) ^ (sum + k[(sum>>11) & 3]); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 126 | } |
| 127 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 128 | PUT_UINT32_BE(info->v0, result, 0); |
| 129 | memcpy(out, result, use_len); |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 130 | len -= use_len; |
| 131 | out += 4; |
| 132 | } |
| 133 | |
Gilles Peskine | 1b6c09a | 2023-01-11 14:52:35 +0100 | [diff] [blame] | 134 | return 0; |
Ronald Cron | 2058d56 | 2020-06-09 17:11:47 +0200 | [diff] [blame] | 135 | } |