1*7c478bd9Sstevel@tonic-gate /*
2*7c478bd9Sstevel@tonic-gate * CDDL HEADER START
3*7c478bd9Sstevel@tonic-gate *
4*7c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*7c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
6*7c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
7*7c478bd9Sstevel@tonic-gate * with the License.
8*7c478bd9Sstevel@tonic-gate *
9*7c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*7c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
11*7c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
12*7c478bd9Sstevel@tonic-gate * and limitations under the License.
13*7c478bd9Sstevel@tonic-gate *
14*7c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
15*7c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*7c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
17*7c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
18*7c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
19*7c478bd9Sstevel@tonic-gate *
20*7c478bd9Sstevel@tonic-gate * CDDL HEADER END
21*7c478bd9Sstevel@tonic-gate */
22*7c478bd9Sstevel@tonic-gate /*
23*7c478bd9Sstevel@tonic-gate * Copyright 2005 Sun Microsystems, Inc. All rights reserved.
24*7c478bd9Sstevel@tonic-gate * Use is subject to license terms.
25*7c478bd9Sstevel@tonic-gate */
26*7c478bd9Sstevel@tonic-gate
27*7c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
28*7c478bd9Sstevel@tonic-gate
29*7c478bd9Sstevel@tonic-gate #include "kernelGlobal.h"
30*7c478bd9Sstevel@tonic-gate #include <errno.h>
31*7c478bd9Sstevel@tonic-gate #include <security/cryptoki.h>
32*7c478bd9Sstevel@tonic-gate #include <sys/crypto/common.h>
33*7c478bd9Sstevel@tonic-gate #include <sys/crypto/ioctl.h>
34*7c478bd9Sstevel@tonic-gate
35*7c478bd9Sstevel@tonic-gate CK_RV
C_SeedRandom(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pSeed,CK_ULONG ulSeedLen)36*7c478bd9Sstevel@tonic-gate C_SeedRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSeed, CK_ULONG ulSeedLen)
37*7c478bd9Sstevel@tonic-gate {
38*7c478bd9Sstevel@tonic-gate kernel_session_t *session_p;
39*7c478bd9Sstevel@tonic-gate crypto_seed_random_t seed_random;
40*7c478bd9Sstevel@tonic-gate boolean_t ses_lock_held = B_FALSE;
41*7c478bd9Sstevel@tonic-gate CK_RV rv;
42*7c478bd9Sstevel@tonic-gate int r;
43*7c478bd9Sstevel@tonic-gate
44*7c478bd9Sstevel@tonic-gate if (!kernel_initialized)
45*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
46*7c478bd9Sstevel@tonic-gate
47*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer. */
48*7c478bd9Sstevel@tonic-gate rv = handle2session(hSession, &session_p);
49*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
50*7c478bd9Sstevel@tonic-gate return (rv);
51*7c478bd9Sstevel@tonic-gate
52*7c478bd9Sstevel@tonic-gate if ((pSeed == NULL) || (ulSeedLen == 0)) {
53*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held);
54*7c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
55*7c478bd9Sstevel@tonic-gate }
56*7c478bd9Sstevel@tonic-gate
57*7c478bd9Sstevel@tonic-gate seed_random.sr_session = session_p->k_session;
58*7c478bd9Sstevel@tonic-gate seed_random.sr_seedbuf = (caddr_t)pSeed;
59*7c478bd9Sstevel@tonic-gate seed_random.sr_seedlen = ulSeedLen;
60*7c478bd9Sstevel@tonic-gate
61*7c478bd9Sstevel@tonic-gate while ((r = ioctl(kernel_fd, CRYPTO_SEED_RANDOM, &seed_random)) < 0) {
62*7c478bd9Sstevel@tonic-gate if (errno != EINTR)
63*7c478bd9Sstevel@tonic-gate break;
64*7c478bd9Sstevel@tonic-gate }
65*7c478bd9Sstevel@tonic-gate if (r < 0) {
66*7c478bd9Sstevel@tonic-gate rv = CKR_FUNCTION_FAILED;
67*7c478bd9Sstevel@tonic-gate } else {
68*7c478bd9Sstevel@tonic-gate if (seed_random.sr_return_value != CRYPTO_SUCCESS) {
69*7c478bd9Sstevel@tonic-gate rv = crypto2pkcs11_error_number(
70*7c478bd9Sstevel@tonic-gate seed_random.sr_return_value);
71*7c478bd9Sstevel@tonic-gate } else {
72*7c478bd9Sstevel@tonic-gate rv = CKR_OK;
73*7c478bd9Sstevel@tonic-gate }
74*7c478bd9Sstevel@tonic-gate }
75*7c478bd9Sstevel@tonic-gate
76*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held);
77*7c478bd9Sstevel@tonic-gate return (rv);
78*7c478bd9Sstevel@tonic-gate }
79*7c478bd9Sstevel@tonic-gate
80*7c478bd9Sstevel@tonic-gate CK_RV
C_GenerateRandom(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pRandomData,CK_ULONG ulRandomLen)81*7c478bd9Sstevel@tonic-gate C_GenerateRandom(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pRandomData,
82*7c478bd9Sstevel@tonic-gate CK_ULONG ulRandomLen)
83*7c478bd9Sstevel@tonic-gate {
84*7c478bd9Sstevel@tonic-gate kernel_session_t *session_p;
85*7c478bd9Sstevel@tonic-gate crypto_generate_random_t generate_random;
86*7c478bd9Sstevel@tonic-gate boolean_t ses_lock_held = B_FALSE;
87*7c478bd9Sstevel@tonic-gate CK_RV rv;
88*7c478bd9Sstevel@tonic-gate int r;
89*7c478bd9Sstevel@tonic-gate
90*7c478bd9Sstevel@tonic-gate if (!kernel_initialized)
91*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
92*7c478bd9Sstevel@tonic-gate
93*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer. */
94*7c478bd9Sstevel@tonic-gate rv = handle2session(hSession, &session_p);
95*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
96*7c478bd9Sstevel@tonic-gate return (rv);
97*7c478bd9Sstevel@tonic-gate
98*7c478bd9Sstevel@tonic-gate if ((pRandomData == NULL) || (ulRandomLen == 0)) {
99*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held);
100*7c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
101*7c478bd9Sstevel@tonic-gate }
102*7c478bd9Sstevel@tonic-gate
103*7c478bd9Sstevel@tonic-gate generate_random.gr_session = session_p->k_session;
104*7c478bd9Sstevel@tonic-gate generate_random.gr_buf = (caddr_t)pRandomData;
105*7c478bd9Sstevel@tonic-gate generate_random.gr_buflen = ulRandomLen;
106*7c478bd9Sstevel@tonic-gate
107*7c478bd9Sstevel@tonic-gate while ((r = ioctl(kernel_fd, CRYPTO_GENERATE_RANDOM,
108*7c478bd9Sstevel@tonic-gate &generate_random)) < 0) {
109*7c478bd9Sstevel@tonic-gate if (errno != EINTR)
110*7c478bd9Sstevel@tonic-gate break;
111*7c478bd9Sstevel@tonic-gate }
112*7c478bd9Sstevel@tonic-gate if (r < 0) {
113*7c478bd9Sstevel@tonic-gate rv = CKR_FUNCTION_FAILED;
114*7c478bd9Sstevel@tonic-gate } else {
115*7c478bd9Sstevel@tonic-gate if (generate_random.gr_return_value != CRYPTO_SUCCESS) {
116*7c478bd9Sstevel@tonic-gate rv = crypto2pkcs11_error_number(
117*7c478bd9Sstevel@tonic-gate generate_random.gr_return_value);
118*7c478bd9Sstevel@tonic-gate } else {
119*7c478bd9Sstevel@tonic-gate rv = CKR_OK;
120*7c478bd9Sstevel@tonic-gate }
121*7c478bd9Sstevel@tonic-gate }
122*7c478bd9Sstevel@tonic-gate
123*7c478bd9Sstevel@tonic-gate REFRELE(session_p, ses_lock_held);
124*7c478bd9Sstevel@tonic-gate return (rv);
125*7c478bd9Sstevel@tonic-gate }
126