31 #if !defined(POLARSSL_CONFIG_FILE)
34 #include POLARSSL_CONFIG_FILE
37 #if defined(POLARSSL_CTR_DRBG_C)
41 #if defined(POLARSSL_FS_IO)
45 #if defined(POLARSSL_PLATFORM_C)
48 #define polarssl_printf printf
52 static void polarssl_zeroize(
void *v,
size_t n ) {
53 volatile unsigned char *p = v;
while( n-- ) *p++ = 0;
62 int (*f_entropy)(
void *,
unsigned char *,
size_t),
64 const unsigned char *custom,
94 int (*f_entropy)(
void *,
unsigned char *,
size_t),
96 const unsigned char *custom,
127 static int block_cipher_df(
unsigned char *output,
128 const unsigned char *data,
size_t data_len )
134 unsigned char *p, *iv;
138 size_t buf_len, use_len;
151 *p++ = ( data_len >> 24 ) & 0xff;
152 *p++ = ( data_len >> 16 ) & 0xff;
153 *p++ = ( data_len >> 8 ) & 0xff;
154 *p++ = ( data_len ) & 0xff;
157 memcpy( p, data, data_len );
160 buf_len = CTR_DRBG_BLOCKSIZE + 8 + data_len + 1;
173 memset( chain, 0, CTR_DRBG_BLOCKSIZE );
182 CTR_DRBG_BLOCKSIZE : use_len;
187 memcpy( tmp + j, chain, CTR_DRBG_BLOCKSIZE );
205 memcpy( p, iv, CTR_DRBG_BLOCKSIZE );
215 const unsigned char data[CTR_DRBG_SEEDLEN] )
218 unsigned char *p = tmp;
221 memset( tmp, 0, CTR_DRBG_SEEDLEN );
228 for( i = CTR_DRBG_BLOCKSIZE; i > 0; i-- )
229 if( ++ctx->
counter[i - 1] != 0 )
247 memcpy( ctx->
counter, tmp + CTR_DRBG_KEYSIZE, CTR_DRBG_BLOCKSIZE );
253 const unsigned char *additional,
size_t add_len )
259 block_cipher_df( add_input, additional, add_len );
260 ctr_drbg_update_internal( ctx, add_input );
265 const unsigned char *additional,
size_t len )
289 if( additional && len )
291 memcpy( seed + seedlen, additional, len );
298 block_cipher_df( seed, seed, seedlen );
303 ctr_drbg_update_internal( ctx, seed );
310 unsigned char *output,
size_t output_len,
311 const unsigned char *additional,
size_t add_len )
316 unsigned char *p = output;
327 memset( add_input, 0, CTR_DRBG_SEEDLEN );
340 block_cipher_df( add_input, additional, add_len );
341 ctr_drbg_update_internal( ctx, add_input );
344 while( output_len > 0 )
349 for( i = CTR_DRBG_BLOCKSIZE; i > 0; i-- )
350 if( ++ctx->
counter[i - 1] != 0 )
363 memcpy( p, tmp, use_len );
365 output_len -= use_len;
368 ctr_drbg_update_internal( ctx, add_input );
375 int ctr_drbg_random(
void *p_rng,
unsigned char *output,
size_t output_len )
380 #if defined(POLARSSL_FS_IO)
387 if( ( f = fopen( path,
"wb" ) ) == NULL )
412 if( ( f = fopen( path,
"rb" ) ) == NULL )
415 fseek( f, 0, SEEK_END );
416 n = (size_t) ftell( f );
417 fseek( f, 0, SEEK_SET );
425 if( fread( buf, 1, n, f ) != n )
439 #if defined(POLARSSL_SELF_TEST)
443 static unsigned char entropy_source_pr[96] =
444 { 0xc1, 0x80, 0x81, 0xa6, 0x5d, 0x44, 0x02, 0x16,
445 0x19, 0xb3, 0xf1, 0x80, 0xb1, 0xc9, 0x20, 0x02,
446 0x6a, 0x54, 0x6f, 0x0c, 0x70, 0x81, 0x49, 0x8b,
447 0x6e, 0xa6, 0x62, 0x52, 0x6d, 0x51, 0xb1, 0xcb,
448 0x58, 0x3b, 0xfa, 0xd5, 0x37, 0x5f, 0xfb, 0xc9,
449 0xff, 0x46, 0xd2, 0x19, 0xc7, 0x22, 0x3e, 0x95,
450 0x45, 0x9d, 0x82, 0xe1, 0xe7, 0x22, 0x9f, 0x63,
451 0x31, 0x69, 0xd2, 0x6b, 0x57, 0x47, 0x4f, 0xa3,
452 0x37, 0xc9, 0x98, 0x1c, 0x0b, 0xfb, 0x91, 0x31,
453 0x4d, 0x55, 0xb9, 0xe9, 0x1c, 0x5a, 0x5e, 0xe4,
454 0x93, 0x92, 0xcf, 0xc5, 0x23, 0x12, 0xd5, 0x56,
455 0x2c, 0x4a, 0x6e, 0xff, 0xdc, 0x10, 0xd0, 0x68 };
457 static unsigned char entropy_source_nopr[64] =
458 { 0x5a, 0x19, 0x4d, 0x5e, 0x2b, 0x31, 0x58, 0x14,
459 0x54, 0xde, 0xf6, 0x75, 0xfb, 0x79, 0x58, 0xfe,
460 0xc7, 0xdb, 0x87, 0x3e, 0x56, 0x89, 0xfc, 0x9d,
461 0x03, 0x21, 0x7c, 0x68, 0xd8, 0x03, 0x38, 0x20,
462 0xf9, 0xe6, 0x5e, 0x04, 0xd8, 0x56, 0xf3, 0xa9,
463 0xc4, 0x4a, 0x4c, 0xbd, 0xc1, 0xd0, 0x08, 0x46,
464 0xf5, 0x98, 0x3d, 0x77, 0x1c, 0x1b, 0x13, 0x7e,
465 0x4e, 0x0f, 0x9d, 0x8e, 0xf4, 0x09, 0xf9, 0x2e };
467 static const unsigned char nonce_pers_pr[16] =
468 { 0xd2, 0x54, 0xfc, 0xff, 0x02, 0x1e, 0x69, 0xd2,
469 0x29, 0xc9, 0xcf, 0xad, 0x85, 0xfa, 0x48, 0x6c };
471 static const unsigned char nonce_pers_nopr[16] =
472 { 0x1b, 0x54, 0xb8, 0xff, 0x06, 0x42, 0xbf, 0xf5,
473 0x21, 0xf1, 0x5c, 0x1c, 0x0b, 0x66, 0x5f, 0x3f };
475 static const unsigned char result_pr[16] =
476 { 0x34, 0x01, 0x16, 0x56, 0xb4, 0x29, 0x00, 0x8f,
477 0x35, 0x63, 0xec, 0xb5, 0xf2, 0x59, 0x07, 0x23 };
479 static const unsigned char result_nopr[16] =
480 { 0xa0, 0x54, 0x30, 0x3d, 0x8a, 0x7e, 0xa9, 0x88,
481 0x9d, 0x90, 0x3e, 0x07, 0x7c, 0x6f, 0x21, 0x8f };
483 static size_t test_offset;
484 static int ctr_drbg_self_test_entropy(
void *data,
unsigned char *buf,
487 const unsigned char *p = data;
488 memcpy( buf, p + test_offset, len );
493 #define CHK( c ) if( (c) != 0 ) \
496 polarssl_printf( "failed\n" ); \
506 unsigned char buf[16];
516 entropy_source_pr, nonce_pers_pr, 16, 32 ) );
520 CHK( memcmp( buf, result_pr, CTR_DRBG_BLOCKSIZE ) );
533 entropy_source_nopr, nonce_pers_nopr, 16, 32 ) );
537 CHK( memcmp( buf, result_nopr, 16 ) );