1*7c478bd9Sstevel@tonic-gate /* 2*7c478bd9Sstevel@tonic-gate * CDDL HEADER START 3*7c478bd9Sstevel@tonic-gate * 4*7c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*7c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 6*7c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 7*7c478bd9Sstevel@tonic-gate * with the License. 8*7c478bd9Sstevel@tonic-gate * 9*7c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10*7c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 11*7c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 12*7c478bd9Sstevel@tonic-gate * and limitations under the License. 13*7c478bd9Sstevel@tonic-gate * 14*7c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 15*7c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16*7c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 17*7c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 18*7c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 19*7c478bd9Sstevel@tonic-gate * 20*7c478bd9Sstevel@tonic-gate * CDDL HEADER END 21*7c478bd9Sstevel@tonic-gate */ 22*7c478bd9Sstevel@tonic-gate /* 23*7c478bd9Sstevel@tonic-gate * Copyright 2004 Sun Microsystems, Inc. All rights reserved. 24*7c478bd9Sstevel@tonic-gate * Use is subject to license terms. 25*7c478bd9Sstevel@tonic-gate */ 26*7c478bd9Sstevel@tonic-gate 27*7c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 28*7c478bd9Sstevel@tonic-gate 29*7c478bd9Sstevel@tonic-gate #include <security/cryptoki.h> 30*7c478bd9Sstevel@tonic-gate #include "pkcs11Global.h" 31*7c478bd9Sstevel@tonic-gate #include "pkcs11Session.h" 32*7c478bd9Sstevel@tonic-gate #include "pkcs11Slot.h" 33*7c478bd9Sstevel@tonic-gate 34*7c478bd9Sstevel@tonic-gate /* 35*7c478bd9Sstevel@tonic-gate * C_SeedRandom will verify that the session handle is valid within 36*7c478bd9Sstevel@tonic-gate * the framework, that random numbers are not disabled for the slot 37*7c478bd9Sstevel@tonic-gate * associated with this session, and then redirect to the underlying 38*7c478bd9Sstevel@tonic-gate * provider. 39*7c478bd9Sstevel@tonic-gate */ 40*7c478bd9Sstevel@tonic-gate CK_RV 41*7c478bd9Sstevel@tonic-gate C_SeedRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSeed, CK_ULONG ulSeedLen) 42*7c478bd9Sstevel@tonic-gate { 43*7c478bd9Sstevel@tonic-gate CK_RV rv; 44*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp; 45*7c478bd9Sstevel@tonic-gate CK_SLOT_ID slotid; 46*7c478bd9Sstevel@tonic-gate 47*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */ 48*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) { 49*7c478bd9Sstevel@tonic-gate /* Check if random number functions are allowed */ 50*7c478bd9Sstevel@tonic-gate if (policyfastpath && 51*7c478bd9Sstevel@tonic-gate slottable->st_slots[fast_slot]->sl_norandom) { 52*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED); 53*7c478bd9Sstevel@tonic-gate } 54*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_SeedRandom(hSession, pSeed, ulSeedLen)); 55*7c478bd9Sstevel@tonic-gate } 56*7c478bd9Sstevel@tonic-gate 57*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) { 58*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED); 59*7c478bd9Sstevel@tonic-gate } 60*7c478bd9Sstevel@tonic-gate 61*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */ 62*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv); 63*7c478bd9Sstevel@tonic-gate 64*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) { 65*7c478bd9Sstevel@tonic-gate return (rv); 66*7c478bd9Sstevel@tonic-gate } 67*7c478bd9Sstevel@tonic-gate 68*7c478bd9Sstevel@tonic-gate slotid = sessp->se_slotid; 69*7c478bd9Sstevel@tonic-gate 70*7c478bd9Sstevel@tonic-gate /* Check if random number functions are allowed */ 71*7c478bd9Sstevel@tonic-gate if (slottable->st_slots[slotid]->sl_norandom) 72*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED); 73*7c478bd9Sstevel@tonic-gate 74*7c478bd9Sstevel@tonic-gate /* Pass data to the provider */ 75*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(slotid)->C_SeedRandom(sessp->se_handle, pSeed, 76*7c478bd9Sstevel@tonic-gate ulSeedLen); 77*7c478bd9Sstevel@tonic-gate 78*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */ 79*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) { 80*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED); 81*7c478bd9Sstevel@tonic-gate } 82*7c478bd9Sstevel@tonic-gate 83*7c478bd9Sstevel@tonic-gate return (rv); 84*7c478bd9Sstevel@tonic-gate } 85*7c478bd9Sstevel@tonic-gate 86*7c478bd9Sstevel@tonic-gate /* 87*7c478bd9Sstevel@tonic-gate * C_GenerateRandom will verify that the session handle is valid within 88*7c478bd9Sstevel@tonic-gate * the framework, that random numbers are not disabled for the slot 89*7c478bd9Sstevel@tonic-gate * associated with this session, and then redirect to the underlying 90*7c478bd9Sstevel@tonic-gate * provider. 91*7c478bd9Sstevel@tonic-gate */ 92*7c478bd9Sstevel@tonic-gate CK_RV 93*7c478bd9Sstevel@tonic-gate C_GenerateRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pRandomData, 94*7c478bd9Sstevel@tonic-gate CK_ULONG ulRandomLen) 95*7c478bd9Sstevel@tonic-gate { 96*7c478bd9Sstevel@tonic-gate CK_RV rv; 97*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp; 98*7c478bd9Sstevel@tonic-gate CK_SLOT_ID slotid; 99*7c478bd9Sstevel@tonic-gate 100*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */ 101*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) { 102*7c478bd9Sstevel@tonic-gate /* Check if random number functions are allowed */ 103*7c478bd9Sstevel@tonic-gate if (policyfastpath && 104*7c478bd9Sstevel@tonic-gate slottable->st_slots[fast_slot]->sl_norandom) { 105*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED); 106*7c478bd9Sstevel@tonic-gate } 107*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_GenerateRandom(hSession, pRandomData, 108*7c478bd9Sstevel@tonic-gate ulRandomLen)); 109*7c478bd9Sstevel@tonic-gate } 110*7c478bd9Sstevel@tonic-gate 111*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) { 112*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED); 113*7c478bd9Sstevel@tonic-gate } 114*7c478bd9Sstevel@tonic-gate 115*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */ 116*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv); 117*7c478bd9Sstevel@tonic-gate 118*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) { 119*7c478bd9Sstevel@tonic-gate return (rv); 120*7c478bd9Sstevel@tonic-gate } 121*7c478bd9Sstevel@tonic-gate 122*7c478bd9Sstevel@tonic-gate slotid = sessp->se_slotid; 123*7c478bd9Sstevel@tonic-gate 124*7c478bd9Sstevel@tonic-gate /* Check if random number functions are allowed */ 125*7c478bd9Sstevel@tonic-gate if (slottable->st_slots[slotid]->sl_norandom) 126*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED); 127*7c478bd9Sstevel@tonic-gate 128*7c478bd9Sstevel@tonic-gate /* Pass data to the provider */ 129*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(sessp->se_slotid)->C_GenerateRandom(sessp->se_handle, 130*7c478bd9Sstevel@tonic-gate pRandomData, ulRandomLen); 131*7c478bd9Sstevel@tonic-gate 132*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */ 133*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) { 134*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED); 135*7c478bd9Sstevel@tonic-gate } 136*7c478bd9Sstevel@tonic-gate 137*7c478bd9Sstevel@tonic-gate return (rv); 138*7c478bd9Sstevel@tonic-gate } 139