1 /* $Id: arc4random.c 26092 2008-09-19 15:13:52Z androsyn $ */
2 /* $$$: arc4random.c 2005/02/08 robert */
3 /* $NetBSD: arc4random.c,v 1.5.2.1 2004/03/26 22:52:50 jmc Exp $ */
4 /* $OpenBSD: arc4random.c,v 1.6 2001/06/05 05:05:38 pvalchev Exp $ */
7 * Arc4 random number generator for OpenBSD.
8 * Copyright 1996 David Mazieres <dm@lcs.mit.edu>.
10 * Modification and redistribution in source and binary forms is
11 * permitted provided that due credit is given to the author and the
12 * OpenBSD project by leaving this copyright notice intact.
16 * This code is derived from section 17.1 of Applied Cryptography,
17 * second edition, which describes a stream cipher allegedly
18 * compatible with RSA Labs "RC4" cipher (the actual description of
19 * which is a trade secret). The same algorithm is used as a stream
20 * cipher called "arcfour" in Tatu Ylonen's ssh package.
22 * Here the stream cipher has been modified always to include the time
23 * when initializing the state. That makes it impossible to
24 * regenerate the same random sequence twice, so this can't be used
25 * for encryption, but will generate good random numbers.
27 * RC4 is a registered trademark of RSA Laboratories.
31 #include <libratbox_config.h>
32 #include <ratbox_lib.h>
34 #if !defined(HAVE_OPENSSL) && !defined(HAVE_GNUTLS) && !defined(HAVE_ARC4RANDOM)
36 #include "arc4random.h"
39 #include <sys/resource.h>
52 static int rs_initialized
;
53 static struct arc4_stream rs
;
55 static inline void arc4_init(struct arc4_stream
*);
56 static inline void arc4_addrandom(struct arc4_stream
*, uint8_t *, int);
57 static void arc4_stir(struct arc4_stream
*);
58 static inline uint8_t arc4_getbyte(struct arc4_stream
*);
59 static inline uint32_t arc4_getword(struct arc4_stream
*);
62 arc4_init(struct arc4_stream
*as
)
66 for(n
= 0; n
< 256; n
++)
73 arc4_addrandom(struct arc4_stream
*as
, uint8_t *dat
, int datlen
)
79 for(n
= 0; n
< 256; n
++)
83 as
->j
= (as
->j
+ si
+ dat
[n
% datlen
]);
84 as
->s
[as
->i
] = as
->s
[as
->j
];
91 arc4_stir(struct arc4_stream
*as
)
99 /* XXX this doesn't support egd sources or similiar */
102 arc4_addrandom(as
, (void *)&pid
, sizeof(pid
));
104 rb_gettimeofday(&tv
, NULL
);
105 arc4_addrandom(as
, (void *)&tv
.tv_sec
, sizeof(&tv
.tv_sec
));
106 arc4_addrandom(as
, (void *)&tv
.tv_usec
, sizeof(&tv
.tv_usec
));
107 rb_gettimeofday(&tv
, NULL
);
108 arc4_addrandom(as
, (void *)&tv
.tv_usec
, sizeof(&tv
.tv_usec
));
110 #if defined(HAVE_GETRUSAGE) && RUSAGE_SELF
113 getrusage(RUSAGE_SELF
, &buf
);
114 arc4_addrandom(as
, (void *)&buf
, sizeof(buf
));
115 memset(&buf
, 0, sizeof(buf
))}
122 fd
= open("/dev/urandom", O_RDONLY
);
125 read(fd
, rnd
, sizeof(rnd
));
127 arc4_addrandom(as
, (void *)rnd
, sizeof(rnd
));
128 memset(&rnd
, 0, sizeof(rnd
));
134 LARGE_INTEGER performanceCount
;
135 if(QueryPerformanceCounter(&performanceCount
))
137 arc4_addrandom(as
, (void *)&performanceCount
, sizeof(performanceCount
));
139 lib
= LoadLibrary("ADVAPI32.DLL");
143 BOOLEAN(APIENTRY
* pfn
) (void *, ULONG
) =
144 (BOOLEAN(APIENTRY
*) (void *, ULONG
))GetProcAddress(lib
,
145 "SystemFunction036");
148 if(pfn(rnd
, sizeof(rnd
)) == TRUE
)
149 arc4_addrandom(as
, (void *)rnd
, sizeof(rnd
));
150 memset(&rnd
, 0, sizeof(rnd
));
158 * Throw away the first N words of output, as suggested in the
159 * paper "Weaknesses in the Key Scheduling Algorithm of RC4"
160 * by Fluher, Mantin, and Shamir.
161 * http://www.wisdom.weizmann.ac.il/~itsik/RC4/Papers/Rc4_ksa.ps
162 * N = 256 in our case.
164 for(n
= 0; n
< 256 * 4; n
++)
168 static inline uint8_t
169 arc4_getbyte(struct arc4_stream
*as
)
175 as
->j
= (as
->j
+ si
);
179 return (as
->s
[(si
+ sj
) & 0xff]);
182 static inline uint32_t
183 arc4_getword(struct arc4_stream
*as
)
186 val
= arc4_getbyte(as
) << 24;
187 val
|= arc4_getbyte(as
) << 16;
188 val
|= arc4_getbyte(as
) << 8;
189 val
|= arc4_getbyte(as
);
194 arc4random_stir(void)
205 arc4random_addrandom(uint8_t *dat
, int datlen
)
209 arc4_addrandom(&rs
, dat
, datlen
);
217 return arc4_getword(&rs
);