228 lines
7.7 KiB
C
228 lines
7.7 KiB
C
/* crypto/des/new_rkey.c */
|
|
/* Copyright (C) 1995-1996 Eric Young (eay@mincom.oz.au)
|
|
* All rights reserved.
|
|
*
|
|
* This file is part of an SSL implementation written
|
|
* by Eric Young (eay@mincom.oz.au).
|
|
* The implementation was written so as to conform with Netscapes SSL
|
|
* specification. This library and applications are
|
|
* FREE FOR COMMERCIAL AND NON-COMMERCIAL USE
|
|
* as long as the following conditions are aheared to.
|
|
*
|
|
* Copyright remains Eric Young's, and as such any Copyright notices in
|
|
* the code are not to be removed. If this code is used in a product,
|
|
* Eric Young should be given attribution as the author of the parts used.
|
|
* This can be in the form of a textual message at program startup or
|
|
* in documentation (online or textual) provided with the package.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed by Eric Young (eay@mincom.oz.au)
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* The licence and distribution terms for any publically available version or
|
|
* derivative of this code cannot be changed. i.e. this code cannot simply be
|
|
* copied and put under another distribution licence
|
|
* [including the GNU Public Licence.]
|
|
*/
|
|
|
|
/*
|
|
* Copyright (c) 1995
|
|
* Mark Murray. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed by Mark Murray
|
|
* and Eric Young
|
|
* 4. Neither the name of the author nor the names of any co-contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY MARK MURRAY AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* $Id$
|
|
*/
|
|
|
|
/* 21-Nov-95 - eay - I've finally put this into libdes, I have made a
|
|
* few changes since it need to compile on all version of unix and
|
|
* there were a few things that would not :-) */
|
|
|
|
#include <fcntl.h>
|
|
#include <stdio.h>
|
|
#include <unistd.h>
|
|
#include <sys/time.h>
|
|
#include <sys/param.h>
|
|
#include <sys/sysctl.h>
|
|
#include <machine/types.h>
|
|
|
|
#include "des_locl.h"
|
|
|
|
/* This counter keeps track of the pseudo-random sequence */
|
|
static union {
|
|
DES_LONG ul0, ul1;
|
|
unsigned char uc[8];
|
|
} counter;
|
|
|
|
/* The current encryption schedule */
|
|
static des_key_schedule current_key;
|
|
|
|
/*
|
|
* des_set_random_generator_seed: starts a new pseudorandom sequence
|
|
* dependant on the supplied key
|
|
*/
|
|
void
|
|
des_set_random_generator_seed(new_key)
|
|
des_cblock *new_key;
|
|
{
|
|
des_key_sched(new_key, current_key);
|
|
|
|
/* reset the counter */
|
|
counter.ul0 = counter.ul1 = 0;
|
|
}
|
|
|
|
/*
|
|
* des_set_sequence_number: set the counter to a known value
|
|
*/
|
|
void
|
|
des_set_sequence_number(new_counter)
|
|
des_cblock new_counter;
|
|
{
|
|
memcpy((char *)counter.uc,(char *)new_counter,sizeof(counter));
|
|
}
|
|
|
|
/*
|
|
* des_generate_random_block: returns the next 64 bit random number
|
|
*/
|
|
|
|
void des_generate_random_block(random_block)
|
|
des_cblock *random_block;
|
|
{
|
|
/* Encrypt the counter to get pseudo-random numbers */
|
|
des_ecb_encrypt(&counter.uc, random_block, current_key, DES_ENCRYPT);
|
|
|
|
/* increment the 64-bit counter
|
|
* (or that could be a 128 bit counter on a 64 bit box - eay */
|
|
if (!++counter.ul0) counter.ul1++;
|
|
}
|
|
|
|
/*
|
|
* des_new_random_key: Invents a new, random strong key with odd parity.
|
|
*/
|
|
int
|
|
des_new_random_key(new_key)
|
|
des_cblock *new_key;
|
|
{
|
|
do {
|
|
des_generate_random_block(new_key);
|
|
des_set_odd_parity(new_key);
|
|
} while (des_is_weak_key(new_key));
|
|
return(0);
|
|
}
|
|
|
|
/*
|
|
* des_init_random_number_generator: intialises the random number generator
|
|
* to a truly nasty sequence using system
|
|
* supplied volatile variables.
|
|
*/
|
|
void
|
|
des_init_random_number_generator(key)
|
|
des_cblock *key;
|
|
{
|
|
/* 64-bit structures */
|
|
struct {
|
|
u_int32_t pid;
|
|
u_int32_t hostid;
|
|
} sysblock;
|
|
struct timeval timeblock;
|
|
struct {
|
|
u_int32_t tv_sec;
|
|
u_int32_t tv_usec;
|
|
} time64bit;
|
|
u_int32_t devrandom[2];
|
|
des_cblock new_key;
|
|
int mib[2];
|
|
size_t len;
|
|
int dr;
|
|
|
|
/* Get host ID using official BSD 4.4 method */
|
|
mib[0] = CTL_KERN;
|
|
mib[1] = KERN_HOSTID;
|
|
len = sizeof(sysblock.hostid);
|
|
sysctl(mib, 2, &sysblock.hostid, &len, NULL, 0);
|
|
|
|
/* Get Process ID */
|
|
sysblock.pid = getpid();
|
|
|
|
/* Generate a new key, and use it to seed the random generator */
|
|
des_set_random_generator_seed(key);
|
|
des_set_sequence_number((unsigned char *)&sysblock);
|
|
des_new_random_key(&new_key);
|
|
des_set_random_generator_seed(&new_key);
|
|
|
|
/* Try to confuse the sequence counter */
|
|
gettimeofday(&timeblock, NULL);
|
|
time64bit.tv_sec = (u_int32_t)timeblock.tv_sec;
|
|
time64bit.tv_usec = (u_int32_t)timeblock.tv_usec;
|
|
/* If /dev/random is available, read some muck */
|
|
dr = open("/dev/random", O_RDONLY);
|
|
if (dr >= 0) {
|
|
/* Set the descriptor into non-blocking mode. */
|
|
fcntl(dr, F_SETFL, O_NONBLOCK);
|
|
len = read(dr, devrandom, sizeof(devrandom));
|
|
close(dr);
|
|
if (len > 0) {
|
|
time64bit.tv_sec ^= devrandom[0];
|
|
time64bit.tv_usec ^= devrandom[1];
|
|
}
|
|
#ifdef DEBUG
|
|
printf("DEBUG: read from /dev/random %d %x %x\n",
|
|
len, devrandom[0], devrandom[1]);
|
|
#endif
|
|
}
|
|
#ifdef DEBUG
|
|
else printf("Cannot open /dev/random\n");
|
|
#endif
|
|
des_set_sequence_number((unsigned char *)&time64bit);
|
|
|
|
/* Do the work */
|
|
des_new_random_key(&new_key);
|
|
des_set_random_generator_seed(&new_key);
|
|
}
|