xref: /freebsd/crypto/openssl/providers/implementations/rands/seed_src_jitter.c (revision e7be843b4a162e68651d3911f0357ed464915629)
1*e7be843bSPierre Pronchery /*
2*e7be843bSPierre Pronchery  * Copyright 2024-2025 The OpenSSL Project Authors. All Rights Reserved.
3*e7be843bSPierre Pronchery  *
4*e7be843bSPierre Pronchery  * Licensed under the Apache License 2.0 (the "License").  You may not use
5*e7be843bSPierre Pronchery  * this file except in compliance with the License.  You can obtain a copy
6*e7be843bSPierre Pronchery  * in the file LICENSE in the source distribution or at
7*e7be843bSPierre Pronchery  * https://www.openssl.org/source/license.html
8*e7be843bSPierre Pronchery  */
9*e7be843bSPierre Pronchery 
10*e7be843bSPierre Pronchery #include <string.h>
11*e7be843bSPierre Pronchery #include <openssl/rand.h>
12*e7be843bSPierre Pronchery #include <openssl/core_dispatch.h>
13*e7be843bSPierre Pronchery #include <openssl/e_os2.h>
14*e7be843bSPierre Pronchery #include <openssl/params.h>
15*e7be843bSPierre Pronchery #include <openssl/core_names.h>
16*e7be843bSPierre Pronchery #include <openssl/evp.h>
17*e7be843bSPierre Pronchery #include <openssl/err.h>
18*e7be843bSPierre Pronchery #include <openssl/randerr.h>
19*e7be843bSPierre Pronchery #include <openssl/proverr.h>
20*e7be843bSPierre Pronchery #include <openssl/self_test.h>
21*e7be843bSPierre Pronchery #include "prov/implementations.h"
22*e7be843bSPierre Pronchery #include "prov/provider_ctx.h"
23*e7be843bSPierre Pronchery #include "prov/providercommon.h"
24*e7be843bSPierre Pronchery #include "crypto/rand.h"
25*e7be843bSPierre Pronchery #include "crypto/rand_pool.h"
26*e7be843bSPierre Pronchery 
27*e7be843bSPierre Pronchery #ifndef OPENSSL_NO_JITTER
28*e7be843bSPierre Pronchery # include <jitterentropy.h>
29*e7be843bSPierre Pronchery 
30*e7be843bSPierre Pronchery # define JITTER_MAX_NUM_TRIES 3
31*e7be843bSPierre Pronchery 
32*e7be843bSPierre Pronchery static OSSL_FUNC_rand_newctx_fn jitter_new;
33*e7be843bSPierre Pronchery static OSSL_FUNC_rand_freectx_fn jitter_free;
34*e7be843bSPierre Pronchery static OSSL_FUNC_rand_instantiate_fn jitter_instantiate;
35*e7be843bSPierre Pronchery static OSSL_FUNC_rand_uninstantiate_fn jitter_uninstantiate;
36*e7be843bSPierre Pronchery static OSSL_FUNC_rand_generate_fn jitter_generate;
37*e7be843bSPierre Pronchery static OSSL_FUNC_rand_reseed_fn jitter_reseed;
38*e7be843bSPierre Pronchery static OSSL_FUNC_rand_gettable_ctx_params_fn jitter_gettable_ctx_params;
39*e7be843bSPierre Pronchery static OSSL_FUNC_rand_get_ctx_params_fn jitter_get_ctx_params;
40*e7be843bSPierre Pronchery static OSSL_FUNC_rand_verify_zeroization_fn jitter_verify_zeroization;
41*e7be843bSPierre Pronchery static OSSL_FUNC_rand_enable_locking_fn jitter_enable_locking;
42*e7be843bSPierre Pronchery static OSSL_FUNC_rand_lock_fn jitter_lock;
43*e7be843bSPierre Pronchery static OSSL_FUNC_rand_unlock_fn jitter_unlock;
44*e7be843bSPierre Pronchery static OSSL_FUNC_rand_get_seed_fn jitter_get_seed;
45*e7be843bSPierre Pronchery static OSSL_FUNC_rand_clear_seed_fn jitter_clear_seed;
46*e7be843bSPierre Pronchery 
47*e7be843bSPierre Pronchery typedef struct {
48*e7be843bSPierre Pronchery     void *provctx;
49*e7be843bSPierre Pronchery     int state;
50*e7be843bSPierre Pronchery } PROV_JITTER;
51*e7be843bSPierre Pronchery 
52*e7be843bSPierre Pronchery static size_t get_jitter_random_value(PROV_JITTER *s, unsigned char *buf, size_t len);
53*e7be843bSPierre Pronchery 
54*e7be843bSPierre Pronchery /*
55*e7be843bSPierre Pronchery  * Acquire entropy from jitterentropy library
56*e7be843bSPierre Pronchery  *
57*e7be843bSPierre Pronchery  * Returns the total entropy count, if it exceeds the requested
58*e7be843bSPierre Pronchery  * entropy count. Otherwise, returns an entropy count of 0.
59*e7be843bSPierre Pronchery  */
ossl_prov_acquire_entropy_from_jitter(PROV_JITTER * s,RAND_POOL * pool)60*e7be843bSPierre Pronchery static size_t ossl_prov_acquire_entropy_from_jitter(PROV_JITTER *s,
61*e7be843bSPierre Pronchery                                                     RAND_POOL *pool)
62*e7be843bSPierre Pronchery {
63*e7be843bSPierre Pronchery     size_t bytes_needed;
64*e7be843bSPierre Pronchery     unsigned char *buffer;
65*e7be843bSPierre Pronchery 
66*e7be843bSPierre Pronchery     bytes_needed = ossl_rand_pool_bytes_needed(pool, 1 /* entropy_factor */);
67*e7be843bSPierre Pronchery     if (bytes_needed > 0) {
68*e7be843bSPierre Pronchery         buffer = ossl_rand_pool_add_begin(pool, bytes_needed);
69*e7be843bSPierre Pronchery 
70*e7be843bSPierre Pronchery         if (buffer != NULL) {
71*e7be843bSPierre Pronchery             if (get_jitter_random_value(s, buffer, bytes_needed) == bytes_needed) {
72*e7be843bSPierre Pronchery                 ossl_rand_pool_add_end(pool, bytes_needed, 8 * bytes_needed);
73*e7be843bSPierre Pronchery             } else {
74*e7be843bSPierre Pronchery                 ossl_rand_pool_add_end(pool, 0, 0);
75*e7be843bSPierre Pronchery             }
76*e7be843bSPierre Pronchery         }
77*e7be843bSPierre Pronchery     }
78*e7be843bSPierre Pronchery 
79*e7be843bSPierre Pronchery     return ossl_rand_pool_entropy_available(pool);
80*e7be843bSPierre Pronchery }
81*e7be843bSPierre Pronchery 
82*e7be843bSPierre Pronchery /* Obtain random bytes from the jitter library */
get_jitter_random_value(PROV_JITTER * s,unsigned char * buf,size_t len)83*e7be843bSPierre Pronchery static size_t get_jitter_random_value(PROV_JITTER *s,
84*e7be843bSPierre Pronchery                                       unsigned char *buf, size_t len)
85*e7be843bSPierre Pronchery {
86*e7be843bSPierre Pronchery     struct rand_data *jitter_ec = NULL;
87*e7be843bSPierre Pronchery     ssize_t result = 0;
88*e7be843bSPierre Pronchery     size_t num_tries;
89*e7be843bSPierre Pronchery 
90*e7be843bSPierre Pronchery     /* Retry intermittent failures, then give up */
91*e7be843bSPierre Pronchery     for (num_tries = 0; num_tries < JITTER_MAX_NUM_TRIES; num_tries++) {
92*e7be843bSPierre Pronchery         /* Allocate a fresh collector */
93*e7be843bSPierre Pronchery         jitter_ec = jent_entropy_collector_alloc(0, JENT_FORCE_FIPS);
94*e7be843bSPierre Pronchery         if (jitter_ec == NULL)
95*e7be843bSPierre Pronchery             continue;
96*e7be843bSPierre Pronchery 
97*e7be843bSPierre Pronchery         /* Do not use _safe API as per typical security policies */
98*e7be843bSPierre Pronchery         result = jent_read_entropy(jitter_ec, (char *) buf, len);
99*e7be843bSPierre Pronchery         jent_entropy_collector_free(jitter_ec);
100*e7be843bSPierre Pronchery 
101*e7be843bSPierre Pronchery         /*
102*e7be843bSPierre Pronchery          * Permanent Failure
103*e7be843bSPierre Pronchery          * https://github.com/smuellerDD/jitterentropy-library/blob/master/doc/jitterentropy.3#L234
104*e7be843bSPierre Pronchery          */
105*e7be843bSPierre Pronchery         if (result < -5) {
106*e7be843bSPierre Pronchery             ossl_set_error_state(OSSL_SELF_TEST_TYPE_CRNG);
107*e7be843bSPierre Pronchery             break;
108*e7be843bSPierre Pronchery         }
109*e7be843bSPierre Pronchery 
110*e7be843bSPierre Pronchery         /* Success */
111*e7be843bSPierre Pronchery         if (result >= 0 && (size_t)result == len)
112*e7be843bSPierre Pronchery             return len;
113*e7be843bSPierre Pronchery     }
114*e7be843bSPierre Pronchery 
115*e7be843bSPierre Pronchery     /* Permanent failure or too many intermittent failures */
116*e7be843bSPierre Pronchery     s->state = EVP_RAND_STATE_ERROR;
117*e7be843bSPierre Pronchery     ERR_raise_data(ERR_LIB_RAND, RAND_R_ERROR_RETRIEVING_ENTROPY,
118*e7be843bSPierre Pronchery                    "jent_read_entropy (%d)", result);
119*e7be843bSPierre Pronchery     return 0;
120*e7be843bSPierre Pronchery }
121*e7be843bSPierre Pronchery 
jitter_new(void * provctx,void * parent,const OSSL_DISPATCH * parent_dispatch)122*e7be843bSPierre Pronchery static void *jitter_new(void *provctx, void *parent,
123*e7be843bSPierre Pronchery                         const OSSL_DISPATCH *parent_dispatch)
124*e7be843bSPierre Pronchery {
125*e7be843bSPierre Pronchery     PROV_JITTER *s;
126*e7be843bSPierre Pronchery 
127*e7be843bSPierre Pronchery     if (parent != NULL) {
128*e7be843bSPierre Pronchery         ERR_raise(ERR_LIB_PROV, PROV_R_SEED_SOURCES_MUST_NOT_HAVE_A_PARENT);
129*e7be843bSPierre Pronchery         return NULL;
130*e7be843bSPierre Pronchery     }
131*e7be843bSPierre Pronchery 
132*e7be843bSPierre Pronchery     s = OPENSSL_zalloc(sizeof(*s));
133*e7be843bSPierre Pronchery     if (s == NULL)
134*e7be843bSPierre Pronchery         return NULL;
135*e7be843bSPierre Pronchery 
136*e7be843bSPierre Pronchery     s->provctx = provctx;
137*e7be843bSPierre Pronchery     s->state = EVP_RAND_STATE_UNINITIALISED;
138*e7be843bSPierre Pronchery     return s;
139*e7be843bSPierre Pronchery }
140*e7be843bSPierre Pronchery 
jitter_free(void * vseed)141*e7be843bSPierre Pronchery static void jitter_free(void *vseed)
142*e7be843bSPierre Pronchery {
143*e7be843bSPierre Pronchery     OPENSSL_free(vseed);
144*e7be843bSPierre Pronchery }
145*e7be843bSPierre Pronchery 
jitter_instantiate(void * vseed,unsigned int strength,int prediction_resistance,const unsigned char * pstr,size_t pstr_len,ossl_unused const OSSL_PARAM params[])146*e7be843bSPierre Pronchery static int jitter_instantiate(void *vseed, unsigned int strength,
147*e7be843bSPierre Pronchery                               int prediction_resistance,
148*e7be843bSPierre Pronchery                               const unsigned char *pstr,
149*e7be843bSPierre Pronchery                               size_t pstr_len,
150*e7be843bSPierre Pronchery                               ossl_unused const OSSL_PARAM params[])
151*e7be843bSPierre Pronchery {
152*e7be843bSPierre Pronchery     PROV_JITTER *s = (PROV_JITTER *)vseed;
153*e7be843bSPierre Pronchery     int ret;
154*e7be843bSPierre Pronchery 
155*e7be843bSPierre Pronchery     if ((ret = jent_entropy_init_ex(0, JENT_FORCE_FIPS)) != 0) {
156*e7be843bSPierre Pronchery         ERR_raise_data(ERR_LIB_RAND, RAND_R_ERROR_RETRIEVING_ENTROPY,
157*e7be843bSPierre Pronchery                        "jent_entropy_init_ex (%d)", ret);
158*e7be843bSPierre Pronchery         s->state = EVP_RAND_STATE_ERROR;
159*e7be843bSPierre Pronchery         return 0;
160*e7be843bSPierre Pronchery     }
161*e7be843bSPierre Pronchery 
162*e7be843bSPierre Pronchery     s->state = EVP_RAND_STATE_READY;
163*e7be843bSPierre Pronchery     return 1;
164*e7be843bSPierre Pronchery }
165*e7be843bSPierre Pronchery 
jitter_uninstantiate(void * vseed)166*e7be843bSPierre Pronchery static int jitter_uninstantiate(void *vseed)
167*e7be843bSPierre Pronchery {
168*e7be843bSPierre Pronchery     PROV_JITTER *s = (PROV_JITTER *)vseed;
169*e7be843bSPierre Pronchery 
170*e7be843bSPierre Pronchery     s->state = EVP_RAND_STATE_UNINITIALISED;
171*e7be843bSPierre Pronchery     return 1;
172*e7be843bSPierre Pronchery }
173*e7be843bSPierre Pronchery 
jitter_generate(void * vseed,unsigned char * out,size_t outlen,unsigned int strength,ossl_unused int prediction_resistance,ossl_unused const unsigned char * adin,ossl_unused size_t adin_len)174*e7be843bSPierre Pronchery static int jitter_generate(void *vseed, unsigned char *out, size_t outlen,
175*e7be843bSPierre Pronchery                            unsigned int strength,
176*e7be843bSPierre Pronchery                            ossl_unused int prediction_resistance,
177*e7be843bSPierre Pronchery                            ossl_unused const unsigned char *adin,
178*e7be843bSPierre Pronchery                            ossl_unused size_t adin_len)
179*e7be843bSPierre Pronchery {
180*e7be843bSPierre Pronchery     PROV_JITTER *s = (PROV_JITTER *)vseed;
181*e7be843bSPierre Pronchery     size_t entropy_available;
182*e7be843bSPierre Pronchery     RAND_POOL *pool;
183*e7be843bSPierre Pronchery 
184*e7be843bSPierre Pronchery     if (s->state != EVP_RAND_STATE_READY) {
185*e7be843bSPierre Pronchery         ERR_raise(ERR_LIB_PROV,
186*e7be843bSPierre Pronchery                   s->state == EVP_RAND_STATE_ERROR ? PROV_R_IN_ERROR_STATE
187*e7be843bSPierre Pronchery                                                    : PROV_R_NOT_INSTANTIATED);
188*e7be843bSPierre Pronchery         return 0;
189*e7be843bSPierre Pronchery     }
190*e7be843bSPierre Pronchery 
191*e7be843bSPierre Pronchery     pool = ossl_rand_pool_new(strength, 1, outlen, outlen);
192*e7be843bSPierre Pronchery     if (pool == NULL) {
193*e7be843bSPierre Pronchery         ERR_raise(ERR_LIB_PROV, ERR_R_RAND_LIB);
194*e7be843bSPierre Pronchery         return 0;
195*e7be843bSPierre Pronchery     }
196*e7be843bSPierre Pronchery 
197*e7be843bSPierre Pronchery     /* Get entropy from jitter entropy library. */
198*e7be843bSPierre Pronchery     entropy_available = ossl_prov_acquire_entropy_from_jitter(s, pool);
199*e7be843bSPierre Pronchery 
200*e7be843bSPierre Pronchery     if (entropy_available > 0) {
201*e7be843bSPierre Pronchery         if (!ossl_rand_pool_adin_mix_in(pool, adin, adin_len)) {
202*e7be843bSPierre Pronchery             ossl_rand_pool_free(pool);
203*e7be843bSPierre Pronchery             return 0;
204*e7be843bSPierre Pronchery         }
205*e7be843bSPierre Pronchery         memcpy(out, ossl_rand_pool_buffer(pool), ossl_rand_pool_length(pool));
206*e7be843bSPierre Pronchery     }
207*e7be843bSPierre Pronchery 
208*e7be843bSPierre Pronchery     ossl_rand_pool_free(pool);
209*e7be843bSPierre Pronchery     return entropy_available > 0;
210*e7be843bSPierre Pronchery }
211*e7be843bSPierre Pronchery 
jitter_reseed(void * vseed,ossl_unused int prediction_resistance,ossl_unused const unsigned char * ent,ossl_unused size_t ent_len,ossl_unused const unsigned char * adin,ossl_unused size_t adin_len)212*e7be843bSPierre Pronchery static int jitter_reseed(void *vseed,
213*e7be843bSPierre Pronchery                          ossl_unused int prediction_resistance,
214*e7be843bSPierre Pronchery                          ossl_unused const unsigned char *ent,
215*e7be843bSPierre Pronchery                          ossl_unused size_t ent_len,
216*e7be843bSPierre Pronchery                          ossl_unused const unsigned char *adin,
217*e7be843bSPierre Pronchery                          ossl_unused size_t adin_len)
218*e7be843bSPierre Pronchery {
219*e7be843bSPierre Pronchery     PROV_JITTER *s = (PROV_JITTER *)vseed;
220*e7be843bSPierre Pronchery 
221*e7be843bSPierre Pronchery     if (s->state != EVP_RAND_STATE_READY) {
222*e7be843bSPierre Pronchery         ERR_raise(ERR_LIB_PROV,
223*e7be843bSPierre Pronchery                   s->state == EVP_RAND_STATE_ERROR ? PROV_R_IN_ERROR_STATE
224*e7be843bSPierre Pronchery                                                    : PROV_R_NOT_INSTANTIATED);
225*e7be843bSPierre Pronchery         return 0;
226*e7be843bSPierre Pronchery     }
227*e7be843bSPierre Pronchery     return 1;
228*e7be843bSPierre Pronchery }
229*e7be843bSPierre Pronchery 
jitter_get_ctx_params(void * vseed,OSSL_PARAM params[])230*e7be843bSPierre Pronchery static int jitter_get_ctx_params(void *vseed, OSSL_PARAM params[])
231*e7be843bSPierre Pronchery {
232*e7be843bSPierre Pronchery     PROV_JITTER *s = (PROV_JITTER *)vseed;
233*e7be843bSPierre Pronchery     OSSL_PARAM *p;
234*e7be843bSPierre Pronchery 
235*e7be843bSPierre Pronchery     p = OSSL_PARAM_locate(params, OSSL_RAND_PARAM_STATE);
236*e7be843bSPierre Pronchery     if (p != NULL && !OSSL_PARAM_set_int(p, s->state))
237*e7be843bSPierre Pronchery         return 0;
238*e7be843bSPierre Pronchery 
239*e7be843bSPierre Pronchery     p = OSSL_PARAM_locate(params, OSSL_RAND_PARAM_STRENGTH);
240*e7be843bSPierre Pronchery     if (p != NULL && !OSSL_PARAM_set_int(p, 1024))
241*e7be843bSPierre Pronchery         return 0;
242*e7be843bSPierre Pronchery 
243*e7be843bSPierre Pronchery     p = OSSL_PARAM_locate(params, OSSL_RAND_PARAM_MAX_REQUEST);
244*e7be843bSPierre Pronchery     if (p != NULL && !OSSL_PARAM_set_size_t(p, 128))
245*e7be843bSPierre Pronchery         return 0;
246*e7be843bSPierre Pronchery     return 1;
247*e7be843bSPierre Pronchery }
248*e7be843bSPierre Pronchery 
jitter_gettable_ctx_params(ossl_unused void * vseed,ossl_unused void * provctx)249*e7be843bSPierre Pronchery static const OSSL_PARAM *jitter_gettable_ctx_params(ossl_unused void *vseed,
250*e7be843bSPierre Pronchery                                                     ossl_unused void *provctx)
251*e7be843bSPierre Pronchery {
252*e7be843bSPierre Pronchery     static const OSSL_PARAM known_gettable_ctx_params[] = {
253*e7be843bSPierre Pronchery         OSSL_PARAM_int(OSSL_RAND_PARAM_STATE, NULL),
254*e7be843bSPierre Pronchery         OSSL_PARAM_uint(OSSL_RAND_PARAM_STRENGTH, NULL),
255*e7be843bSPierre Pronchery         OSSL_PARAM_size_t(OSSL_RAND_PARAM_MAX_REQUEST, NULL),
256*e7be843bSPierre Pronchery         OSSL_PARAM_END
257*e7be843bSPierre Pronchery     };
258*e7be843bSPierre Pronchery     return known_gettable_ctx_params;
259*e7be843bSPierre Pronchery }
260*e7be843bSPierre Pronchery 
jitter_verify_zeroization(ossl_unused void * vseed)261*e7be843bSPierre Pronchery static int jitter_verify_zeroization(ossl_unused void *vseed)
262*e7be843bSPierre Pronchery {
263*e7be843bSPierre Pronchery     return 1;
264*e7be843bSPierre Pronchery }
265*e7be843bSPierre Pronchery 
jitter_get_seed(void * vseed,unsigned char ** pout,int entropy,size_t min_len,size_t max_len,int prediction_resistance,const unsigned char * adin,size_t adin_len)266*e7be843bSPierre Pronchery static size_t jitter_get_seed(void *vseed, unsigned char **pout,
267*e7be843bSPierre Pronchery                               int entropy, size_t min_len,
268*e7be843bSPierre Pronchery                               size_t max_len,
269*e7be843bSPierre Pronchery                               int prediction_resistance,
270*e7be843bSPierre Pronchery                               const unsigned char *adin,
271*e7be843bSPierre Pronchery                               size_t adin_len)
272*e7be843bSPierre Pronchery {
273*e7be843bSPierre Pronchery     size_t ret = 0;
274*e7be843bSPierre Pronchery     size_t entropy_available = 0;
275*e7be843bSPierre Pronchery     RAND_POOL *pool;
276*e7be843bSPierre Pronchery     PROV_JITTER *s = (PROV_JITTER *)vseed;
277*e7be843bSPierre Pronchery 
278*e7be843bSPierre Pronchery     pool = ossl_rand_pool_new(entropy, 1, min_len, max_len);
279*e7be843bSPierre Pronchery     if (pool == NULL) {
280*e7be843bSPierre Pronchery         ERR_raise(ERR_LIB_PROV, ERR_R_RAND_LIB);
281*e7be843bSPierre Pronchery         return 0;
282*e7be843bSPierre Pronchery     }
283*e7be843bSPierre Pronchery 
284*e7be843bSPierre Pronchery     /* Get entropy from jitter entropy library. */
285*e7be843bSPierre Pronchery     entropy_available = ossl_prov_acquire_entropy_from_jitter(s, pool);
286*e7be843bSPierre Pronchery 
287*e7be843bSPierre Pronchery     if (entropy_available > 0
288*e7be843bSPierre Pronchery         && ossl_rand_pool_adin_mix_in(pool, adin, adin_len)) {
289*e7be843bSPierre Pronchery         ret = ossl_rand_pool_length(pool);
290*e7be843bSPierre Pronchery         *pout = ossl_rand_pool_detach(pool);
291*e7be843bSPierre Pronchery     } else {
292*e7be843bSPierre Pronchery         ERR_raise(ERR_LIB_PROV, PROV_R_ENTROPY_SOURCE_STRENGTH_TOO_WEAK);
293*e7be843bSPierre Pronchery     }
294*e7be843bSPierre Pronchery     ossl_rand_pool_free(pool);
295*e7be843bSPierre Pronchery     return ret;
296*e7be843bSPierre Pronchery }
297*e7be843bSPierre Pronchery 
298*e7be843bSPierre Pronchery # ifndef OPENSSL_NO_FIPS_JITTER
ossl_rand_jitter_get_seed(unsigned char ** pout,int entropy,size_t min_len,size_t max_len)299*e7be843bSPierre Pronchery size_t ossl_rand_jitter_get_seed(unsigned char **pout, int entropy, size_t min_len, size_t max_len)
300*e7be843bSPierre Pronchery {
301*e7be843bSPierre Pronchery     size_t ret = 0;
302*e7be843bSPierre Pronchery     OSSL_PARAM params[1] = { OSSL_PARAM_END };
303*e7be843bSPierre Pronchery     PROV_JITTER *s = jitter_new(NULL, NULL, NULL);
304*e7be843bSPierre Pronchery 
305*e7be843bSPierre Pronchery     if (s == NULL)
306*e7be843bSPierre Pronchery         return ret;
307*e7be843bSPierre Pronchery     if (!jitter_instantiate(s, 0, 0, NULL, 0, params))
308*e7be843bSPierre Pronchery         goto end;
309*e7be843bSPierre Pronchery     ret = jitter_get_seed(s, pout, entropy, min_len, max_len, 0, NULL, 0);
310*e7be843bSPierre Pronchery  end:
311*e7be843bSPierre Pronchery     jitter_free(s);
312*e7be843bSPierre Pronchery     return ret;
313*e7be843bSPierre Pronchery }
314*e7be843bSPierre Pronchery # endif
315*e7be843bSPierre Pronchery 
jitter_clear_seed(ossl_unused void * vdrbg,unsigned char * out,size_t outlen)316*e7be843bSPierre Pronchery static void jitter_clear_seed(ossl_unused void *vdrbg,
317*e7be843bSPierre Pronchery                               unsigned char *out, size_t outlen)
318*e7be843bSPierre Pronchery {
319*e7be843bSPierre Pronchery     OPENSSL_secure_clear_free(out, outlen);
320*e7be843bSPierre Pronchery }
321*e7be843bSPierre Pronchery 
jitter_enable_locking(ossl_unused void * vseed)322*e7be843bSPierre Pronchery static int jitter_enable_locking(ossl_unused void *vseed)
323*e7be843bSPierre Pronchery {
324*e7be843bSPierre Pronchery     return 1;
325*e7be843bSPierre Pronchery }
326*e7be843bSPierre Pronchery 
jitter_lock(ossl_unused void * vctx)327*e7be843bSPierre Pronchery int jitter_lock(ossl_unused void *vctx)
328*e7be843bSPierre Pronchery {
329*e7be843bSPierre Pronchery     return 1;
330*e7be843bSPierre Pronchery }
331*e7be843bSPierre Pronchery 
jitter_unlock(ossl_unused void * vctx)332*e7be843bSPierre Pronchery void jitter_unlock(ossl_unused void *vctx)
333*e7be843bSPierre Pronchery {
334*e7be843bSPierre Pronchery }
335*e7be843bSPierre Pronchery 
336*e7be843bSPierre Pronchery const OSSL_DISPATCH ossl_jitter_functions[] = {
337*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_NEWCTX, (void(*)(void))jitter_new },
338*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_FREECTX, (void(*)(void))jitter_free },
339*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_INSTANTIATE,
340*e7be843bSPierre Pronchery       (void(*)(void))jitter_instantiate },
341*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_UNINSTANTIATE,
342*e7be843bSPierre Pronchery       (void(*)(void))jitter_uninstantiate },
343*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_GENERATE, (void(*)(void))jitter_generate },
344*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_RESEED, (void(*)(void))jitter_reseed },
345*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_ENABLE_LOCKING, (void(*)(void))jitter_enable_locking },
346*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_LOCK, (void(*)(void))jitter_lock },
347*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_UNLOCK, (void(*)(void))jitter_unlock },
348*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_GETTABLE_CTX_PARAMS,
349*e7be843bSPierre Pronchery       (void(*)(void))jitter_gettable_ctx_params },
350*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_GET_CTX_PARAMS, (void(*)(void))jitter_get_ctx_params },
351*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_VERIFY_ZEROIZATION,
352*e7be843bSPierre Pronchery       (void(*)(void))jitter_verify_zeroization },
353*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_GET_SEED, (void(*)(void))jitter_get_seed },
354*e7be843bSPierre Pronchery     { OSSL_FUNC_RAND_CLEAR_SEED, (void(*)(void))jitter_clear_seed },
355*e7be843bSPierre Pronchery     OSSL_DISPATCH_END
356*e7be843bSPierre Pronchery };
357*e7be843bSPierre Pronchery #else
358*e7be843bSPierre Pronchery NON_EMPTY_TRANSLATION_UNIT
359*e7be843bSPierre Pronchery #endif
360