rand_unix.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448
  1. /* crypto/rand/rand_unix.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. /* ====================================================================
  59. * Copyright (c) 1998-2006 The OpenSSL Project. All rights reserved.
  60. *
  61. * Redistribution and use in source and binary forms, with or without
  62. * modification, are permitted provided that the following conditions
  63. * are met:
  64. *
  65. * 1. Redistributions of source code must retain the above copyright
  66. * notice, this list of conditions and the following disclaimer.
  67. *
  68. * 2. Redistributions in binary form must reproduce the above copyright
  69. * notice, this list of conditions and the following disclaimer in
  70. * the documentation and/or other materials provided with the
  71. * distribution.
  72. *
  73. * 3. All advertising materials mentioning features or use of this
  74. * software must display the following acknowledgment:
  75. * "This product includes software developed by the OpenSSL Project
  76. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77. *
  78. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79. * endorse or promote products derived from this software without
  80. * prior written permission. For written permission, please contact
  81. * openssl-core@openssl.org.
  82. *
  83. * 5. Products derived from this software may not be called "OpenSSL"
  84. * nor may "OpenSSL" appear in their names without prior written
  85. * permission of the OpenSSL Project.
  86. *
  87. * 6. Redistributions of any form whatsoever must retain the following
  88. * acknowledgment:
  89. * "This product includes software developed by the OpenSSL Project
  90. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91. *
  92. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  100. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  101. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  102. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  103. * OF THE POSSIBILITY OF SUCH DAMAGE.
  104. * ====================================================================
  105. *
  106. * This product includes cryptographic software written by Eric Young
  107. * (eay@cryptsoft.com). This product includes software written by Tim
  108. * Hudson (tjh@cryptsoft.com).
  109. *
  110. */
  111. #include <stdio.h>
  112. #define USE_SOCKETS
  113. #include "e_os.h"
  114. #include "cryptlib.h"
  115. #include <openssl/rand.h>
  116. #include "rand_lcl.h"
  117. #if !(defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_WIN32) || defined(OPENSSL_SYS_VMS) || defined(OPENSSL_SYS_OS2) || defined(OPENSSL_SYS_VXWORKS) || defined(OPENSSL_SYS_NETWARE))
  118. # include <sys/types.h>
  119. # include <sys/time.h>
  120. # include <sys/times.h>
  121. # include <sys/stat.h>
  122. # include <fcntl.h>
  123. # include <unistd.h>
  124. # include <time.h>
  125. # if defined(OPENSSL_SYS_LINUX) /* should actually be available virtually
  126. * everywhere */
  127. # include <poll.h>
  128. # endif
  129. # include <limits.h>
  130. # ifndef FD_SETSIZE
  131. # define FD_SETSIZE (8*sizeof(fd_set))
  132. # endif
  133. # if defined(OPENSSL_SYS_VOS)
  134. /*
  135. * The following algorithm repeatedly samples the real-time clock (RTC) to
  136. * generate a sequence of unpredictable data. The algorithm relies upon the
  137. * uneven execution speed of the code (due to factors such as cache misses,
  138. * interrupts, bus activity, and scheduling) and upon the rather large
  139. * relative difference between the speed of the clock and the rate at which
  140. * it can be read.
  141. *
  142. * If this code is ported to an environment where execution speed is more
  143. * constant or where the RTC ticks at a much slower rate, or the clock can be
  144. * read with fewer instructions, it is likely that the results would be far
  145. * more predictable.
  146. *
  147. * As a precaution, we generate 4 times the minimum required amount of seed
  148. * data.
  149. */
  150. int RAND_poll(void)
  151. {
  152. short int code;
  153. gid_t curr_gid;
  154. pid_t curr_pid;
  155. uid_t curr_uid;
  156. int i, k;
  157. struct timespec ts;
  158. unsigned char v;
  159. # ifdef OPENSSL_SYS_VOS_HPPA
  160. long duration;
  161. extern void s$sleep(long *_duration, short int *_code);
  162. # else
  163. # ifdef OPENSSL_SYS_VOS_IA32
  164. long long duration;
  165. extern void s$sleep2(long long *_duration, short int *_code);
  166. # else
  167. # error "Unsupported Platform."
  168. # endif /* OPENSSL_SYS_VOS_IA32 */
  169. # endif /* OPENSSL_SYS_VOS_HPPA */
  170. /*
  171. * Seed with the gid, pid, and uid, to ensure *some* variation between
  172. * different processes.
  173. */
  174. curr_gid = getgid();
  175. RAND_add(&curr_gid, sizeof curr_gid, 1);
  176. curr_gid = 0;
  177. curr_pid = getpid();
  178. RAND_add(&curr_pid, sizeof curr_pid, 1);
  179. curr_pid = 0;
  180. curr_uid = getuid();
  181. RAND_add(&curr_uid, sizeof curr_uid, 1);
  182. curr_uid = 0;
  183. for (i = 0; i < (ENTROPY_NEEDED * 4); i++) {
  184. /*
  185. * burn some cpu; hope for interrupts, cache collisions, bus
  186. * interference, etc.
  187. */
  188. for (k = 0; k < 99; k++)
  189. ts.tv_nsec = random();
  190. # ifdef OPENSSL_SYS_VOS_HPPA
  191. /* sleep for 1/1024 of a second (976 us). */
  192. duration = 1;
  193. s$sleep(&duration, &code);
  194. # else
  195. # ifdef OPENSSL_SYS_VOS_IA32
  196. /* sleep for 1/65536 of a second (15 us). */
  197. duration = 1;
  198. s$sleep2(&duration, &code);
  199. # endif /* OPENSSL_SYS_VOS_IA32 */
  200. # endif /* OPENSSL_SYS_VOS_HPPA */
  201. /* get wall clock time. */
  202. clock_gettime(CLOCK_REALTIME, &ts);
  203. /* take 8 bits */
  204. v = (unsigned char)(ts.tv_nsec % 256);
  205. RAND_add(&v, sizeof v, 1);
  206. v = 0;
  207. }
  208. return 1;
  209. }
  210. # elif defined __OpenBSD__
  211. int RAND_poll(void)
  212. {
  213. u_int32_t rnd = 0, i;
  214. unsigned char buf[ENTROPY_NEEDED];
  215. for (i = 0; i < sizeof(buf); i++) {
  216. if (i % 4 == 0)
  217. rnd = arc4random();
  218. buf[i] = rnd;
  219. rnd >>= 8;
  220. }
  221. RAND_add(buf, sizeof(buf), ENTROPY_NEEDED);
  222. OPENSSL_cleanse(buf, sizeof(buf));
  223. return 1;
  224. }
  225. # else /* !defined(__OpenBSD__) */
  226. int RAND_poll(void)
  227. {
  228. unsigned long l;
  229. pid_t curr_pid = getpid();
  230. # if defined(DEVRANDOM) || defined(DEVRANDOM_EGD)
  231. unsigned char tmpbuf[ENTROPY_NEEDED];
  232. int n = 0;
  233. # endif
  234. # ifdef DEVRANDOM
  235. static const char *randomfiles[] = { DEVRANDOM };
  236. struct stat randomstats[sizeof(randomfiles) / sizeof(randomfiles[0])];
  237. int fd;
  238. unsigned int i;
  239. # endif
  240. # ifdef DEVRANDOM_EGD
  241. static const char *egdsockets[] = { DEVRANDOM_EGD, NULL };
  242. const char **egdsocket = NULL;
  243. # endif
  244. # ifdef DEVRANDOM
  245. memset(randomstats, 0, sizeof(randomstats));
  246. /*
  247. * Use a random entropy pool device. Linux, FreeBSD and OpenBSD have
  248. * this. Use /dev/urandom if you can as /dev/random may block if it runs
  249. * out of random entries.
  250. */
  251. for (i = 0; (i < sizeof(randomfiles) / sizeof(randomfiles[0])) &&
  252. (n < ENTROPY_NEEDED); i++) {
  253. if ((fd = open(randomfiles[i], O_RDONLY
  254. # ifdef O_NONBLOCK
  255. | O_NONBLOCK
  256. # endif
  257. # ifdef O_BINARY
  258. | O_BINARY
  259. # endif
  260. # ifdef O_NOCTTY /* If it happens to be a TTY (god forbid), do
  261. * not make it our controlling tty */
  262. | O_NOCTTY
  263. # endif
  264. )) >= 0) {
  265. int usec = 10 * 1000; /* spend 10ms on each file */
  266. int r;
  267. unsigned int j;
  268. struct stat *st = &randomstats[i];
  269. /*
  270. * Avoid using same input... Used to be O_NOFOLLOW above, but
  271. * it's not universally appropriate...
  272. */
  273. if (fstat(fd, st) != 0) {
  274. close(fd);
  275. continue;
  276. }
  277. for (j = 0; j < i; j++) {
  278. if (randomstats[j].st_ino == st->st_ino &&
  279. randomstats[j].st_dev == st->st_dev)
  280. break;
  281. }
  282. if (j < i) {
  283. close(fd);
  284. continue;
  285. }
  286. do {
  287. int try_read = 0;
  288. # if defined(OPENSSL_SYS_BEOS_R5)
  289. /*
  290. * select() is broken in BeOS R5, so we simply try to read
  291. * something and snooze if we couldn't
  292. */
  293. try_read = 1;
  294. # elif defined(OPENSSL_SYS_LINUX)
  295. /* use poll() */
  296. struct pollfd pset;
  297. pset.fd = fd;
  298. pset.events = POLLIN;
  299. pset.revents = 0;
  300. if (poll(&pset, 1, usec / 1000) < 0)
  301. usec = 0;
  302. else
  303. try_read = (pset.revents & POLLIN) != 0;
  304. # else
  305. /* use select() */
  306. fd_set fset;
  307. struct timeval t;
  308. t.tv_sec = 0;
  309. t.tv_usec = usec;
  310. if (FD_SETSIZE > 0 && (unsigned)fd >= FD_SETSIZE) {
  311. /*
  312. * can't use select, so just try to read once anyway
  313. */
  314. try_read = 1;
  315. } else {
  316. FD_ZERO(&fset);
  317. FD_SET(fd, &fset);
  318. if (select(fd + 1, &fset, NULL, NULL, &t) >= 0) {
  319. usec = t.tv_usec;
  320. if (FD_ISSET(fd, &fset))
  321. try_read = 1;
  322. } else
  323. usec = 0;
  324. }
  325. # endif
  326. if (try_read) {
  327. r = read(fd, (unsigned char *)tmpbuf + n,
  328. ENTROPY_NEEDED - n);
  329. if (r > 0)
  330. n += r;
  331. # if defined(OPENSSL_SYS_BEOS_R5)
  332. if (r == 0)
  333. snooze(t.tv_usec);
  334. # endif
  335. } else
  336. r = -1;
  337. /*
  338. * Some Unixen will update t in select(), some won't. For
  339. * those who won't, or if we didn't use select() in the first
  340. * place, give up here, otherwise, we will do this once again
  341. * for the remaining time.
  342. */
  343. if (usec == 10 * 1000)
  344. usec = 0;
  345. }
  346. while ((r > 0 ||
  347. (errno == EINTR || errno == EAGAIN)) && usec != 0
  348. && n < ENTROPY_NEEDED);
  349. close(fd);
  350. }
  351. }
  352. # endif /* defined(DEVRANDOM) */
  353. # ifdef DEVRANDOM_EGD
  354. /*
  355. * Use an EGD socket to read entropy from an EGD or PRNGD entropy
  356. * collecting daemon.
  357. */
  358. for (egdsocket = egdsockets; *egdsocket && n < ENTROPY_NEEDED;
  359. egdsocket++) {
  360. int r;
  361. r = RAND_query_egd_bytes(*egdsocket, (unsigned char *)tmpbuf + n,
  362. ENTROPY_NEEDED - n);
  363. if (r > 0)
  364. n += r;
  365. }
  366. # endif /* defined(DEVRANDOM_EGD) */
  367. # if defined(DEVRANDOM) || defined(DEVRANDOM_EGD)
  368. if (n > 0) {
  369. RAND_add(tmpbuf, sizeof tmpbuf, (double)n);
  370. OPENSSL_cleanse(tmpbuf, n);
  371. }
  372. # endif
  373. /* put in some default random data, we need more than just this */
  374. l = curr_pid;
  375. RAND_add(&l, sizeof(l), 0.0);
  376. l = getuid();
  377. RAND_add(&l, sizeof(l), 0.0);
  378. l = time(NULL);
  379. RAND_add(&l, sizeof(l), 0.0);
  380. # if defined(OPENSSL_SYS_BEOS)
  381. {
  382. system_info sysInfo;
  383. get_system_info(&sysInfo);
  384. RAND_add(&sysInfo, sizeof(sysInfo), 0);
  385. }
  386. # endif
  387. # if defined(DEVRANDOM) || defined(DEVRANDOM_EGD)
  388. return 1;
  389. # else
  390. return 0;
  391. # endif
  392. }
  393. # endif /* defined(__OpenBSD__) */
  394. #endif /* !(defined(OPENSSL_SYS_WINDOWS) ||
  395. * defined(OPENSSL_SYS_WIN32) ||
  396. * defined(OPENSSL_SYS_VMS) ||
  397. * defined(OPENSSL_SYS_OS2) ||
  398. * defined(OPENSSL_SYS_VXWORKS) ||
  399. * defined(OPENSSL_SYS_NETWARE)) */
  400. #if defined(OPENSSL_SYS_VXWORKS)
  401. int RAND_poll(void)
  402. {
  403. return 0;
  404. }
  405. #endif