freebsd-dev/secure/lib/libdes/new_rkey.c
1997-02-22 14:40:44 +00:00

228 lines
7.7 KiB
C

/* crypto/des/new_rkey.c */
/* Copyright (C) 1995-1996 Eric Young (eay@mincom.oz.au)
* All rights reserved.
*
* This file is part of an SSL implementation written
* by Eric Young (eay@mincom.oz.au).
* The implementation was written so as to conform with Netscapes SSL
* specification. This library and applications are
* FREE FOR COMMERCIAL AND NON-COMMERCIAL USE
* as long as the following conditions are aheared to.
*
* Copyright remains Eric Young's, and as such any Copyright notices in
* the code are not to be removed. If this code is used in a product,
* Eric Young should be given attribution as the author of the parts used.
* This can be in the form of a textual message at program startup or
* in documentation (online or textual) provided with the package.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. All advertising materials mentioning features or use of this software
* must display the following acknowledgement:
* This product includes software developed by Eric Young (eay@mincom.oz.au)
*
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
* The licence and distribution terms for any publically available version or
* derivative of this code cannot be changed. i.e. this code cannot simply be
* copied and put under another distribution licence
* [including the GNU Public Licence.]
*/
/*
* Copyright (c) 1995
* Mark Murray. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. All advertising materials mentioning features or use of this software
* must display the following acknowledgement:
* This product includes software developed by Mark Murray
* and Eric Young
* 4. Neither the name of the author nor the names of any co-contributors
* may be used to endorse or promote products derived from this software
* without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY MARK MURRAY AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
* $Id$
*/
/* 21-Nov-95 - eay - I've finally put this into libdes, I have made a
* few changes since it need to compile on all version of unix and
* there were a few things that would not :-) */
#include <fcntl.h>
#include <stdio.h>
#include <unistd.h>
#include <sys/time.h>
#include <sys/param.h>
#include <sys/sysctl.h>
#include <machine/types.h>
#include "des_locl.h"
/* This counter keeps track of the pseudo-random sequence */
static union {
DES_LONG ul0, ul1;
unsigned char uc[8];
} counter;
/* The current encryption schedule */
static des_key_schedule current_key;
/*
* des_set_random_generator_seed: starts a new pseudorandom sequence
* dependant on the supplied key
*/
void
des_set_random_generator_seed(new_key)
des_cblock *new_key;
{
des_key_sched(new_key, current_key);
/* reset the counter */
counter.ul0 = counter.ul1 = 0;
}
/*
* des_set_sequence_number: set the counter to a known value
*/
void
des_set_sequence_number(new_counter)
des_cblock new_counter;
{
memcpy((char *)counter.uc,(char *)new_counter,sizeof(counter));
}
/*
* des_generate_random_block: returns the next 64 bit random number
*/
void des_generate_random_block(random_block)
des_cblock *random_block;
{
/* Encrypt the counter to get pseudo-random numbers */
des_ecb_encrypt(&counter.uc, random_block, current_key, DES_ENCRYPT);
/* increment the 64-bit counter
* (or that could be a 128 bit counter on a 64 bit box - eay */
if (!++counter.ul0) counter.ul1++;
}
/*
* des_new_random_key: Invents a new, random strong key with odd parity.
*/
int
des_new_random_key(new_key)
des_cblock *new_key;
{
do {
des_generate_random_block(new_key);
des_set_odd_parity(new_key);
} while (des_is_weak_key(new_key));
return(0);
}
/*
* des_init_random_number_generator: intialises the random number generator
* to a truly nasty sequence using system
* supplied volatile variables.
*/
void
des_init_random_number_generator(key)
des_cblock *key;
{
/* 64-bit structures */
struct {
u_int32_t pid;
u_int32_t hostid;
} sysblock;
struct timeval timeblock;
struct {
u_int32_t tv_sec;
u_int32_t tv_usec;
} time64bit;
u_int32_t devrandom[2];
des_cblock new_key;
int mib[2];
size_t len;
int dr;
/* Get host ID using official BSD 4.4 method */
mib[0] = CTL_KERN;
mib[1] = KERN_HOSTID;
len = sizeof(sysblock.hostid);
sysctl(mib, 2, &sysblock.hostid, &len, NULL, 0);
/* Get Process ID */
sysblock.pid = getpid();
/* Generate a new key, and use it to seed the random generator */
des_set_random_generator_seed(key);
des_set_sequence_number((unsigned char *)&sysblock);
des_new_random_key(&new_key);
des_set_random_generator_seed(&new_key);
/* Try to confuse the sequence counter */
gettimeofday(&timeblock, NULL);
time64bit.tv_sec = (u_int32_t)timeblock.tv_sec;
time64bit.tv_usec = (u_int32_t)timeblock.tv_usec;
/* If /dev/random is available, read some muck */
dr = open("/dev/random", O_RDONLY);
if (dr >= 0) {
/* Set the descriptor into non-blocking mode. */
fcntl(dr, F_SETFL, O_NONBLOCK);
len = read(dr, devrandom, sizeof(devrandom));
close(dr);
if (len > 0) {
time64bit.tv_sec ^= devrandom[0];
time64bit.tv_usec ^= devrandom[1];
}
#ifdef DEBUG
printf("DEBUG: read from /dev/random %d %x %x\n",
len, devrandom[0], devrandom[1]);
#endif
}
#ifdef DEBUG
else printf("Cannot open /dev/random\n");
#endif
des_set_sequence_number((unsigned char *)&time64bit);
/* Do the work */
des_new_random_key(&new_key);
des_set_random_generator_seed(&new_key);
}