blob: 4024f7d9c77dfe848de46ee0ea3afea57ad69ec1 [file] [log] [blame]
Greg Kroah-Hartmanb2441312017-11-01 15:07:57 +01001/* SPDX-License-Identifier: GPL-2.0 */
Linus Torvalds1da177e2005-04-16 15:20:36 -07002/*
3 * include/linux/random.h
4 *
5 * Include file for the random number generator.
6 */
Linus Torvalds1da177e2005-04-16 15:20:36 -07007#ifndef _LINUX_RANDOM_H
8#define _LINUX_RANDOM_H
9
Herbert Xu205a5252015-06-09 18:19:39 +080010#include <linux/list.h>
Daniel Borkmann897ece52015-10-08 01:20:38 +020011#include <linux/once.h>
12
David Howells607ca462012-10-13 10:46:48 +010013#include <uapi/linux/random.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070014
Herbert Xu205a5252015-06-09 18:19:39 +080015struct random_ready_callback {
16 struct list_head list;
17 void (*func)(struct random_ready_callback *rdy);
18 struct module *owner;
19};
20
Linus Torvaldsa2080a62012-07-04 11:16:01 -040021extern void add_device_randomness(const void *, unsigned int);
Emese Revfy38addce2016-06-20 20:41:19 +020022
23#if defined(CONFIG_GCC_PLUGIN_LATENT_ENTROPY) && !defined(__CHECKER__)
24static inline void add_latent_entropy(void)
25{
26 add_device_randomness((const void *)&latent_entropy,
27 sizeof(latent_entropy));
28}
29#else
30static inline void add_latent_entropy(void) {}
31#endif
32
Linus Torvalds1da177e2005-04-16 15:20:36 -070033extern void add_input_randomness(unsigned int type, unsigned int code,
Emese Revfy0766f782016-06-20 20:42:34 +020034 unsigned int value) __latent_entropy;
35extern void add_interrupt_randomness(int irq, int irq_flags) __latent_entropy;
Linus Torvalds1da177e2005-04-16 15:20:36 -070036
37extern void get_random_bytes(void *buf, int nbytes);
Jason A. Donenfelde297a782017-06-07 19:58:56 -040038extern int wait_for_random_bytes(void);
Herbert Xu205a5252015-06-09 18:19:39 +080039extern int add_random_ready_callback(struct random_ready_callback *rdy);
40extern void del_random_ready_callback(struct random_ready_callback *rdy);
Theodore Ts'oc2557a32012-07-05 10:35:23 -040041extern void get_random_bytes_arch(void *buf, int nbytes);
Linus Torvalds1da177e2005-04-16 15:20:36 -070042
Linus Torvalds1da177e2005-04-16 15:20:36 -070043#ifndef MODULE
Arjan van de Ven54047322007-02-12 00:55:28 -080044extern const struct file_operations random_fops, urandom_fops;
Linus Torvalds1da177e2005-04-16 15:20:36 -070045#endif
46
Jason A. Donenfeldc4404082017-01-22 16:34:08 +010047u32 get_random_u32(void);
48u64 get_random_u64(void);
49static inline unsigned int get_random_int(void)
50{
51 return get_random_u32();
52}
53static inline unsigned long get_random_long(void)
54{
55#if BITS_PER_LONG == 64
56 return get_random_u64();
57#else
58 return get_random_u32();
59#endif
60}
61
Rik van Riel022c2042017-07-12 14:36:17 -070062/*
63 * On 64-bit architectures, protect against non-terminated C string overflows
64 * by zeroing out the first byte of the canary; this leaves 56 bits of entropy.
65 */
66#ifdef CONFIG_64BIT
67# ifdef __LITTLE_ENDIAN
68# define CANARY_MASK 0xffffffffffffff00UL
69# else /* big endian, 64 bits: */
70# define CANARY_MASK 0x00ffffffffffffffUL
71# endif
72#else /* 32 bits: */
73# define CANARY_MASK 0xffffffffUL
74#endif
75
76static inline unsigned long get_random_canary(void)
77{
78 unsigned long val = get_random_long();
79
80 return val & CANARY_MASK;
81}
82
Jason A. Donenfeldda9ba562017-06-07 20:05:02 -040083/* Calls wait_for_random_bytes() and then calls get_random_bytes(buf, nbytes).
84 * Returns the result of the call to wait_for_random_bytes. */
85static inline int get_random_bytes_wait(void *buf, int nbytes)
86{
87 int ret = wait_for_random_bytes();
88 if (unlikely(ret))
89 return ret;
90 get_random_bytes(buf, nbytes);
91 return 0;
92}
93
94#define declare_get_random_var_wait(var) \
95 static inline int get_random_ ## var ## _wait(var *out) { \
96 int ret = wait_for_random_bytes(); \
97 if (unlikely(ret)) \
98 return ret; \
99 *out = get_random_ ## var(); \
100 return 0; \
101 }
102declare_get_random_var_wait(u32)
103declare_get_random_var_wait(u64)
104declare_get_random_var_wait(int)
105declare_get_random_var_wait(long)
106#undef declare_get_random_var
107
Jason Cooper99fdafd2016-10-11 13:53:52 -0700108unsigned long randomize_page(unsigned long start, unsigned long range);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700109
Akinobu Mita496f2f92012-12-17 16:04:23 -0800110u32 prandom_u32(void);
Daniel Borkmanna98406e2014-08-23 17:03:28 +0200111void prandom_bytes(void *buf, size_t nbytes);
Akinobu Mita496f2f92012-12-17 16:04:23 -0800112void prandom_seed(u32 seed);
Hannes Frederic Sowa4af712e2013-11-11 12:20:34 +0100113void prandom_reseed_late(void);
Stephen Hemmingeraaa248f2006-10-17 00:09:42 -0700114
Daniel Borkmann38e9efc2013-11-11 12:20:35 +0100115struct rnd_state {
Daniel Borkmanna98814c2013-11-11 12:20:36 +0100116 __u32 s1, s2, s3, s4;
Daniel Borkmann38e9efc2013-11-11 12:20:35 +0100117};
118
Daniel Borkmanna98814c2013-11-11 12:20:36 +0100119u32 prandom_u32_state(struct rnd_state *state);
Daniel Borkmanna98406e2014-08-23 17:03:28 +0200120void prandom_bytes_state(struct rnd_state *state, void *buf, size_t nbytes);
Daniel Borkmann897ece52015-10-08 01:20:38 +0200121void prandom_seed_full_state(struct rnd_state __percpu *pcpu_state);
122
123#define prandom_init_once(pcpu_state) \
124 DO_ONCE(prandom_seed_full_state, (pcpu_state))
Joe Eykholt59601642010-05-26 14:44:13 -0700125
Daniel Borkmannf337db62014-01-22 02:29:39 +0100126/**
127 * prandom_u32_max - returns a pseudo-random number in interval [0, ep_ro)
128 * @ep_ro: right open interval endpoint
129 *
130 * Returns a pseudo-random number that is in interval [0, ep_ro). Note
131 * that the result depends on PRNG being well distributed in [0, ~0U]
132 * u32 space. Here we use maximally equidistributed combined Tausworthe
133 * generator, that is, prandom_u32(). This is useful when requesting a
134 * random index of an array containing ep_ro elements, for example.
135 *
136 * Returns: pseudo-random number in interval [0, ep_ro)
137 */
138static inline u32 prandom_u32_max(u32 ep_ro)
139{
140 return (u32)(((u64) prandom_u32() * ep_ro) >> 32);
141}
142
Joe Eykholt59601642010-05-26 14:44:13 -0700143/*
144 * Handle minimum values for seeds
145 */
146static inline u32 __seed(u32 x, u32 m)
147{
148 return (x < m) ? x + m : x;
149}
150
151/**
Akinobu Mita496f2f92012-12-17 16:04:23 -0800152 * prandom_seed_state - set seed for prandom_u32_state().
Joe Eykholt59601642010-05-26 14:44:13 -0700153 * @state: pointer to state structure to receive the seed.
154 * @seed: arbitrary 64-bit value to use as a seed.
155 */
Akinobu Mita496f2f92012-12-17 16:04:23 -0800156static inline void prandom_seed_state(struct rnd_state *state, u64 seed)
Joe Eykholt59601642010-05-26 14:44:13 -0700157{
158 u32 i = (seed >> 32) ^ (seed << 10) ^ seed;
159
Daniel Borkmanna98814c2013-11-11 12:20:36 +0100160 state->s1 = __seed(i, 2U);
161 state->s2 = __seed(i, 8U);
162 state->s3 = __seed(i, 16U);
163 state->s4 = __seed(i, 128U);
Joe Eykholt59601642010-05-26 14:44:13 -0700164}
165
H. Peter Anvin63d77172011-07-31 13:54:50 -0700166#ifdef CONFIG_ARCH_RANDOM
167# include <asm/archrandom.h>
168#else
H. Peter Anvin117780e2016-06-08 12:38:38 -0700169static inline bool arch_get_random_long(unsigned long *v)
H. Peter Anvin63d77172011-07-31 13:54:50 -0700170{
171 return 0;
172}
H. Peter Anvin117780e2016-06-08 12:38:38 -0700173static inline bool arch_get_random_int(unsigned int *v)
H. Peter Anvin63d77172011-07-31 13:54:50 -0700174{
175 return 0;
176}
H. Peter Anvin117780e2016-06-08 12:38:38 -0700177static inline bool arch_has_random(void)
H. Peter Anvin7b878d42014-03-17 16:36:30 -0700178{
179 return 0;
180}
H. Peter Anvin117780e2016-06-08 12:38:38 -0700181static inline bool arch_get_random_seed_long(unsigned long *v)
H. Peter Anvind20f78d2014-03-17 16:36:27 -0700182{
183 return 0;
184}
H. Peter Anvin117780e2016-06-08 12:38:38 -0700185static inline bool arch_get_random_seed_int(unsigned int *v)
H. Peter Anvind20f78d2014-03-17 16:36:27 -0700186{
187 return 0;
188}
H. Peter Anvin117780e2016-06-08 12:38:38 -0700189static inline bool arch_has_random_seed(void)
H. Peter Anvin7b878d42014-03-17 16:36:30 -0700190{
191 return 0;
192}
H. Peter Anvin63d77172011-07-31 13:54:50 -0700193#endif
194
Tom Herbert055dc212013-01-22 09:49:50 +0000195/* Pseudo random number generator from numerical recipes. */
196static inline u32 next_pseudo_random32(u32 seed)
197{
198 return seed * 1664525 + 1013904223;
199}
200
Linus Torvalds1da177e2005-04-16 15:20:36 -0700201#endif /* _LINUX_RANDOM_H */