1*7c478bd9Sstevel@tonic-gate /* 2*7c478bd9Sstevel@tonic-gate * CDDL HEADER START 3*7c478bd9Sstevel@tonic-gate * 4*7c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*7c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 6*7c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 7*7c478bd9Sstevel@tonic-gate * with the License. 8*7c478bd9Sstevel@tonic-gate * 9*7c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10*7c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 11*7c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 12*7c478bd9Sstevel@tonic-gate * and limitations under the License. 13*7c478bd9Sstevel@tonic-gate * 14*7c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 15*7c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16*7c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 17*7c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 18*7c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 19*7c478bd9Sstevel@tonic-gate * 20*7c478bd9Sstevel@tonic-gate * CDDL HEADER END 21*7c478bd9Sstevel@tonic-gate */ 22*7c478bd9Sstevel@tonic-gate /* 23*7c478bd9Sstevel@tonic-gate * Copyright 2005 Sun Microsystems, Inc. All rights reserved. 24*7c478bd9Sstevel@tonic-gate * Use is subject to license terms. 25*7c478bd9Sstevel@tonic-gate */ 26*7c478bd9Sstevel@tonic-gate 27*7c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 28*7c478bd9Sstevel@tonic-gate 29*7c478bd9Sstevel@tonic-gate #include "kernelGlobal.h" 30*7c478bd9Sstevel@tonic-gate #include <errno.h> 31*7c478bd9Sstevel@tonic-gate #include <security/cryptoki.h> 32*7c478bd9Sstevel@tonic-gate #include <sys/crypto/common.h> 33*7c478bd9Sstevel@tonic-gate #include <sys/crypto/ioctl.h> 34*7c478bd9Sstevel@tonic-gate 35*7c478bd9Sstevel@tonic-gate CK_RV 36*7c478bd9Sstevel@tonic-gate C_SeedRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSeed, CK_ULONG ulSeedLen) 37*7c478bd9Sstevel@tonic-gate { 38*7c478bd9Sstevel@tonic-gate kernel_session_t *session_p; 39*7c478bd9Sstevel@tonic-gate crypto_seed_random_t seed_random; 40*7c478bd9Sstevel@tonic-gate boolean_t ses_lock_held = B_FALSE; 41*7c478bd9Sstevel@tonic-gate CK_RV rv; 42*7c478bd9Sstevel@tonic-gate int r; 43*7c478bd9Sstevel@tonic-gate 44*7c478bd9Sstevel@tonic-gate if (!kernel_initialized) 45*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED); 46*7c478bd9Sstevel@tonic-gate 47*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer. */ 48*7c478bd9Sstevel@tonic-gate rv = handle2session(hSession, &session_p); 49*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) 50*7c478bd9Sstevel@tonic-gate return (rv); 51*7c478bd9Sstevel@tonic-gate 52*7c478bd9Sstevel@tonic-gate if ((pSeed == NULL) || (ulSeedLen == 0)) { 53*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held); 54*7c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD); 55*7c478bd9Sstevel@tonic-gate } 56*7c478bd9Sstevel@tonic-gate 57*7c478bd9Sstevel@tonic-gate seed_random.sr_session = session_p->k_session; 58*7c478bd9Sstevel@tonic-gate seed_random.sr_seedbuf = (caddr_t)pSeed; 59*7c478bd9Sstevel@tonic-gate seed_random.sr_seedlen = ulSeedLen; 60*7c478bd9Sstevel@tonic-gate 61*7c478bd9Sstevel@tonic-gate while ((r = ioctl(kernel_fd, CRYPTO_SEED_RANDOM, &seed_random)) < 0) { 62*7c478bd9Sstevel@tonic-gate if (errno != EINTR) 63*7c478bd9Sstevel@tonic-gate break; 64*7c478bd9Sstevel@tonic-gate } 65*7c478bd9Sstevel@tonic-gate if (r < 0) { 66*7c478bd9Sstevel@tonic-gate rv = CKR_FUNCTION_FAILED; 67*7c478bd9Sstevel@tonic-gate } else { 68*7c478bd9Sstevel@tonic-gate if (seed_random.sr_return_value != CRYPTO_SUCCESS) { 69*7c478bd9Sstevel@tonic-gate rv = crypto2pkcs11_error_number( 70*7c478bd9Sstevel@tonic-gate seed_random.sr_return_value); 71*7c478bd9Sstevel@tonic-gate } else { 72*7c478bd9Sstevel@tonic-gate rv = CKR_OK; 73*7c478bd9Sstevel@tonic-gate } 74*7c478bd9Sstevel@tonic-gate } 75*7c478bd9Sstevel@tonic-gate 76*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held); 77*7c478bd9Sstevel@tonic-gate return (rv); 78*7c478bd9Sstevel@tonic-gate } 79*7c478bd9Sstevel@tonic-gate 80*7c478bd9Sstevel@tonic-gate CK_RV 81*7c478bd9Sstevel@tonic-gate C_GenerateRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pRandomData, 82*7c478bd9Sstevel@tonic-gate CK_ULONG ulRandomLen) 83*7c478bd9Sstevel@tonic-gate { 84*7c478bd9Sstevel@tonic-gate kernel_session_t *session_p; 85*7c478bd9Sstevel@tonic-gate crypto_generate_random_t generate_random; 86*7c478bd9Sstevel@tonic-gate boolean_t ses_lock_held = B_FALSE; 87*7c478bd9Sstevel@tonic-gate CK_RV rv; 88*7c478bd9Sstevel@tonic-gate int r; 89*7c478bd9Sstevel@tonic-gate 90*7c478bd9Sstevel@tonic-gate if (!kernel_initialized) 91*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED); 92*7c478bd9Sstevel@tonic-gate 93*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer. */ 94*7c478bd9Sstevel@tonic-gate rv = handle2session(hSession, &session_p); 95*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) 96*7c478bd9Sstevel@tonic-gate return (rv); 97*7c478bd9Sstevel@tonic-gate 98*7c478bd9Sstevel@tonic-gate if ((pRandomData == NULL) || (ulRandomLen == 0)) { 99*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held); 100*7c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD); 101*7c478bd9Sstevel@tonic-gate } 102*7c478bd9Sstevel@tonic-gate 103*7c478bd9Sstevel@tonic-gate generate_random.gr_session = session_p->k_session; 104*7c478bd9Sstevel@tonic-gate generate_random.gr_buf = (caddr_t)pRandomData; 105*7c478bd9Sstevel@tonic-gate generate_random.gr_buflen = ulRandomLen; 106*7c478bd9Sstevel@tonic-gate 107*7c478bd9Sstevel@tonic-gate while ((r = ioctl(kernel_fd, CRYPTO_GENERATE_RANDOM, 108*7c478bd9Sstevel@tonic-gate &generate_random)) < 0) { 109*7c478bd9Sstevel@tonic-gate if (errno != EINTR) 110*7c478bd9Sstevel@tonic-gate break; 111*7c478bd9Sstevel@tonic-gate } 112*7c478bd9Sstevel@tonic-gate if (r < 0) { 113*7c478bd9Sstevel@tonic-gate rv = CKR_FUNCTION_FAILED; 114*7c478bd9Sstevel@tonic-gate } else { 115*7c478bd9Sstevel@tonic-gate if (generate_random.gr_return_value != CRYPTO_SUCCESS) { 116*7c478bd9Sstevel@tonic-gate rv = crypto2pkcs11_error_number( 117*7c478bd9Sstevel@tonic-gate generate_random.gr_return_value); 118*7c478bd9Sstevel@tonic-gate } else { 119*7c478bd9Sstevel@tonic-gate rv = CKR_OK; 120*7c478bd9Sstevel@tonic-gate } 121*7c478bd9Sstevel@tonic-gate } 122*7c478bd9Sstevel@tonic-gate 123*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held); 124*7c478bd9Sstevel@tonic-gate return (rv); 125*7c478bd9Sstevel@tonic-gate } 126