xref: /titanic_52/usr/src/lib/pkcs11/pkcs11_kernel/common/kernelRand.c (revision 7c478bd95313f5f23a4c958a745db2134aa03244)
1*7c478bd9Sstevel@tonic-gate /*
2*7c478bd9Sstevel@tonic-gate  * CDDL HEADER START
3*7c478bd9Sstevel@tonic-gate  *
4*7c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5*7c478bd9Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
6*7c478bd9Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
7*7c478bd9Sstevel@tonic-gate  * with the License.
8*7c478bd9Sstevel@tonic-gate  *
9*7c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*7c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
11*7c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
12*7c478bd9Sstevel@tonic-gate  * and limitations under the License.
13*7c478bd9Sstevel@tonic-gate  *
14*7c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
15*7c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*7c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
17*7c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
18*7c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
19*7c478bd9Sstevel@tonic-gate  *
20*7c478bd9Sstevel@tonic-gate  * CDDL HEADER END
21*7c478bd9Sstevel@tonic-gate  */
22*7c478bd9Sstevel@tonic-gate /*
23*7c478bd9Sstevel@tonic-gate  * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
24*7c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
25*7c478bd9Sstevel@tonic-gate  */
26*7c478bd9Sstevel@tonic-gate 
27*7c478bd9Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
28*7c478bd9Sstevel@tonic-gate 
29*7c478bd9Sstevel@tonic-gate #include "kernelGlobal.h"
30*7c478bd9Sstevel@tonic-gate #include <errno.h>
31*7c478bd9Sstevel@tonic-gate #include <security/cryptoki.h>
32*7c478bd9Sstevel@tonic-gate #include <sys/crypto/common.h>
33*7c478bd9Sstevel@tonic-gate #include <sys/crypto/ioctl.h>
34*7c478bd9Sstevel@tonic-gate 
35*7c478bd9Sstevel@tonic-gate CK_RV
36*7c478bd9Sstevel@tonic-gate C_SeedRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSeed, CK_ULONG ulSeedLen)
37*7c478bd9Sstevel@tonic-gate {
38*7c478bd9Sstevel@tonic-gate 	kernel_session_t *session_p;
39*7c478bd9Sstevel@tonic-gate 	crypto_seed_random_t seed_random;
40*7c478bd9Sstevel@tonic-gate 	boolean_t ses_lock_held = B_FALSE;
41*7c478bd9Sstevel@tonic-gate 	CK_RV rv;
42*7c478bd9Sstevel@tonic-gate 	int r;
43*7c478bd9Sstevel@tonic-gate 
44*7c478bd9Sstevel@tonic-gate 	if (!kernel_initialized)
45*7c478bd9Sstevel@tonic-gate 		return (CKR_CRYPTOKI_NOT_INITIALIZED);
46*7c478bd9Sstevel@tonic-gate 
47*7c478bd9Sstevel@tonic-gate 	/* Obtain the session pointer. */
48*7c478bd9Sstevel@tonic-gate 	rv = handle2session(hSession, &session_p);
49*7c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
50*7c478bd9Sstevel@tonic-gate 		return (rv);
51*7c478bd9Sstevel@tonic-gate 
52*7c478bd9Sstevel@tonic-gate 	if ((pSeed == NULL) || (ulSeedLen == 0)) {
53*7c478bd9Sstevel@tonic-gate 		REFRELE(session_p, ses_lock_held);
54*7c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
55*7c478bd9Sstevel@tonic-gate 	}
56*7c478bd9Sstevel@tonic-gate 
57*7c478bd9Sstevel@tonic-gate 	seed_random.sr_session = session_p->k_session;
58*7c478bd9Sstevel@tonic-gate 	seed_random.sr_seedbuf = (caddr_t)pSeed;
59*7c478bd9Sstevel@tonic-gate 	seed_random.sr_seedlen = ulSeedLen;
60*7c478bd9Sstevel@tonic-gate 
61*7c478bd9Sstevel@tonic-gate 	while ((r = ioctl(kernel_fd, CRYPTO_SEED_RANDOM, &seed_random)) < 0) {
62*7c478bd9Sstevel@tonic-gate 		if (errno != EINTR)
63*7c478bd9Sstevel@tonic-gate 			break;
64*7c478bd9Sstevel@tonic-gate 	}
65*7c478bd9Sstevel@tonic-gate 	if (r < 0) {
66*7c478bd9Sstevel@tonic-gate 		rv = CKR_FUNCTION_FAILED;
67*7c478bd9Sstevel@tonic-gate 	} else {
68*7c478bd9Sstevel@tonic-gate 		if (seed_random.sr_return_value != CRYPTO_SUCCESS) {
69*7c478bd9Sstevel@tonic-gate 			rv = crypto2pkcs11_error_number(
70*7c478bd9Sstevel@tonic-gate 			    seed_random.sr_return_value);
71*7c478bd9Sstevel@tonic-gate 		} else {
72*7c478bd9Sstevel@tonic-gate 			rv = CKR_OK;
73*7c478bd9Sstevel@tonic-gate 		}
74*7c478bd9Sstevel@tonic-gate 	}
75*7c478bd9Sstevel@tonic-gate 
76*7c478bd9Sstevel@tonic-gate 	REFRELE(session_p, ses_lock_held);
77*7c478bd9Sstevel@tonic-gate 	return (rv);
78*7c478bd9Sstevel@tonic-gate }
79*7c478bd9Sstevel@tonic-gate 
80*7c478bd9Sstevel@tonic-gate CK_RV
81*7c478bd9Sstevel@tonic-gate C_GenerateRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pRandomData,
82*7c478bd9Sstevel@tonic-gate     CK_ULONG ulRandomLen)
83*7c478bd9Sstevel@tonic-gate {
84*7c478bd9Sstevel@tonic-gate 	kernel_session_t *session_p;
85*7c478bd9Sstevel@tonic-gate 	crypto_generate_random_t generate_random;
86*7c478bd9Sstevel@tonic-gate 	boolean_t ses_lock_held = B_FALSE;
87*7c478bd9Sstevel@tonic-gate 	CK_RV rv;
88*7c478bd9Sstevel@tonic-gate 	int r;
89*7c478bd9Sstevel@tonic-gate 
90*7c478bd9Sstevel@tonic-gate 	if (!kernel_initialized)
91*7c478bd9Sstevel@tonic-gate 		return (CKR_CRYPTOKI_NOT_INITIALIZED);
92*7c478bd9Sstevel@tonic-gate 
93*7c478bd9Sstevel@tonic-gate 	/* Obtain the session pointer. */
94*7c478bd9Sstevel@tonic-gate 	rv = handle2session(hSession, &session_p);
95*7c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
96*7c478bd9Sstevel@tonic-gate 		return (rv);
97*7c478bd9Sstevel@tonic-gate 
98*7c478bd9Sstevel@tonic-gate 	if ((pRandomData == NULL) || (ulRandomLen == 0)) {
99*7c478bd9Sstevel@tonic-gate 		REFRELE(session_p, ses_lock_held);
100*7c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
101*7c478bd9Sstevel@tonic-gate 	}
102*7c478bd9Sstevel@tonic-gate 
103*7c478bd9Sstevel@tonic-gate 	generate_random.gr_session = session_p->k_session;
104*7c478bd9Sstevel@tonic-gate 	generate_random.gr_buf = (caddr_t)pRandomData;
105*7c478bd9Sstevel@tonic-gate 	generate_random.gr_buflen = ulRandomLen;
106*7c478bd9Sstevel@tonic-gate 
107*7c478bd9Sstevel@tonic-gate 	while ((r = ioctl(kernel_fd, CRYPTO_GENERATE_RANDOM,
108*7c478bd9Sstevel@tonic-gate 	    &generate_random)) < 0) {
109*7c478bd9Sstevel@tonic-gate 		if (errno != EINTR)
110*7c478bd9Sstevel@tonic-gate 			break;
111*7c478bd9Sstevel@tonic-gate 	}
112*7c478bd9Sstevel@tonic-gate 	if (r < 0) {
113*7c478bd9Sstevel@tonic-gate 		rv = CKR_FUNCTION_FAILED;
114*7c478bd9Sstevel@tonic-gate 	} else {
115*7c478bd9Sstevel@tonic-gate 		if (generate_random.gr_return_value != CRYPTO_SUCCESS) {
116*7c478bd9Sstevel@tonic-gate 			rv = crypto2pkcs11_error_number(
117*7c478bd9Sstevel@tonic-gate 			    generate_random.gr_return_value);
118*7c478bd9Sstevel@tonic-gate 		} else {
119*7c478bd9Sstevel@tonic-gate 			rv = CKR_OK;
120*7c478bd9Sstevel@tonic-gate 		}
121*7c478bd9Sstevel@tonic-gate 	}
122*7c478bd9Sstevel@tonic-gate 
123*7c478bd9Sstevel@tonic-gate 	REFRELE(session_p, ses_lock_held);
124*7c478bd9Sstevel@tonic-gate 	return (rv);
125*7c478bd9Sstevel@tonic-gate }
126