diff options
Diffstat (limited to 'src/lib/libcrypto/rand/rand_win.c')
-rw-r--r-- | src/lib/libcrypto/rand/rand_win.c | 727 |
1 files changed, 727 insertions, 0 deletions
diff --git a/src/lib/libcrypto/rand/rand_win.c b/src/lib/libcrypto/rand/rand_win.c new file mode 100644 index 0000000000..3584842224 --- /dev/null +++ b/src/lib/libcrypto/rand/rand_win.c | |||
@@ -0,0 +1,727 @@ | |||
1 | /* crypto/rand/rand_win.c */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | /* ==================================================================== | ||
59 | * Copyright (c) 1998-2000 The OpenSSL Project. All rights reserved. | ||
60 | * | ||
61 | * Redistribution and use in source and binary forms, with or without | ||
62 | * modification, are permitted provided that the following conditions | ||
63 | * are met: | ||
64 | * | ||
65 | * 1. Redistributions of source code must retain the above copyright | ||
66 | * notice, this list of conditions and the following disclaimer. | ||
67 | * | ||
68 | * 2. Redistributions in binary form must reproduce the above copyright | ||
69 | * notice, this list of conditions and the following disclaimer in | ||
70 | * the documentation and/or other materials provided with the | ||
71 | * distribution. | ||
72 | * | ||
73 | * 3. All advertising materials mentioning features or use of this | ||
74 | * software must display the following acknowledgment: | ||
75 | * "This product includes software developed by the OpenSSL Project | ||
76 | * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" | ||
77 | * | ||
78 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
79 | * endorse or promote products derived from this software without | ||
80 | * prior written permission. For written permission, please contact | ||
81 | * openssl-core@openssl.org. | ||
82 | * | ||
83 | * 5. Products derived from this software may not be called "OpenSSL" | ||
84 | * nor may "OpenSSL" appear in their names without prior written | ||
85 | * permission of the OpenSSL Project. | ||
86 | * | ||
87 | * 6. Redistributions of any form whatsoever must retain the following | ||
88 | * acknowledgment: | ||
89 | * "This product includes software developed by the OpenSSL Project | ||
90 | * for use in the OpenSSL Toolkit (http://www.openssl.org/)" | ||
91 | * | ||
92 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
93 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
94 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
95 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
96 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
97 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
98 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
99 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
100 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
101 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
102 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
103 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
104 | * ==================================================================== | ||
105 | * | ||
106 | * This product includes cryptographic software written by Eric Young | ||
107 | * (eay@cryptsoft.com). This product includes software written by Tim | ||
108 | * Hudson (tjh@cryptsoft.com). | ||
109 | * | ||
110 | */ | ||
111 | |||
112 | #include "cryptlib.h" | ||
113 | #include <openssl/rand.h> | ||
114 | #include "rand_lcl.h" | ||
115 | |||
116 | #if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_WIN32) | ||
117 | #include <windows.h> | ||
118 | #ifndef _WIN32_WINNT | ||
119 | # define _WIN32_WINNT 0x0400 | ||
120 | #endif | ||
121 | #include <wincrypt.h> | ||
122 | #include <tlhelp32.h> | ||
123 | |||
124 | /* Intel hardware RNG CSP -- available from | ||
125 | * http://developer.intel.com/design/security/rng/redist_license.htm | ||
126 | */ | ||
127 | #define PROV_INTEL_SEC 22 | ||
128 | #define INTEL_DEF_PROV TEXT("Intel Hardware Cryptographic Service Provider") | ||
129 | |||
130 | static void readtimer(void); | ||
131 | static void readscreen(void); | ||
132 | |||
133 | /* It appears like CURSORINFO, PCURSORINFO and LPCURSORINFO are only defined | ||
134 | when WINVER is 0x0500 and up, which currently only happens on Win2000. | ||
135 | Unfortunately, those are typedefs, so they're a little bit difficult to | ||
136 | detect properly. On the other hand, the macro CURSOR_SHOWING is defined | ||
137 | within the same conditional, so it can be use to detect the absence of said | ||
138 | typedefs. */ | ||
139 | |||
140 | #ifndef CURSOR_SHOWING | ||
141 | /* | ||
142 | * Information about the global cursor. | ||
143 | */ | ||
144 | typedef struct tagCURSORINFO | ||
145 | { | ||
146 | DWORD cbSize; | ||
147 | DWORD flags; | ||
148 | HCURSOR hCursor; | ||
149 | POINT ptScreenPos; | ||
150 | } CURSORINFO, *PCURSORINFO, *LPCURSORINFO; | ||
151 | |||
152 | #define CURSOR_SHOWING 0x00000001 | ||
153 | #endif /* CURSOR_SHOWING */ | ||
154 | |||
155 | typedef BOOL (WINAPI *CRYPTACQUIRECONTEXT)(HCRYPTPROV *, LPCTSTR, LPCTSTR, | ||
156 | DWORD, DWORD); | ||
157 | typedef BOOL (WINAPI *CRYPTGENRANDOM)(HCRYPTPROV, DWORD, BYTE *); | ||
158 | typedef BOOL (WINAPI *CRYPTRELEASECONTEXT)(HCRYPTPROV, DWORD); | ||
159 | |||
160 | typedef HWND (WINAPI *GETFOREGROUNDWINDOW)(VOID); | ||
161 | typedef BOOL (WINAPI *GETCURSORINFO)(PCURSORINFO); | ||
162 | typedef DWORD (WINAPI *GETQUEUESTATUS)(UINT); | ||
163 | |||
164 | typedef HANDLE (WINAPI *CREATETOOLHELP32SNAPSHOT)(DWORD, DWORD); | ||
165 | typedef BOOL (WINAPI *CLOSETOOLHELP32SNAPSHOT)(HANDLE); | ||
166 | typedef BOOL (WINAPI *HEAP32FIRST)(LPHEAPENTRY32, DWORD, DWORD); | ||
167 | typedef BOOL (WINAPI *HEAP32NEXT)(LPHEAPENTRY32); | ||
168 | typedef BOOL (WINAPI *HEAP32LIST)(HANDLE, LPHEAPLIST32); | ||
169 | typedef BOOL (WINAPI *PROCESS32)(HANDLE, LPPROCESSENTRY32); | ||
170 | typedef BOOL (WINAPI *THREAD32)(HANDLE, LPTHREADENTRY32); | ||
171 | typedef BOOL (WINAPI *MODULE32)(HANDLE, LPMODULEENTRY32); | ||
172 | |||
173 | #include <lmcons.h> | ||
174 | #ifndef OPENSSL_SYS_WINCE | ||
175 | #include <lmstats.h> | ||
176 | #endif | ||
177 | #if 1 /* The NET API is Unicode only. It requires the use of the UNICODE | ||
178 | * macro. When UNICODE is defined LPTSTR becomes LPWSTR. LMSTR was | ||
179 | * was added to the Platform SDK to allow the NET API to be used in | ||
180 | * non-Unicode applications provided that Unicode strings were still | ||
181 | * used for input. LMSTR is defined as LPWSTR. | ||
182 | */ | ||
183 | typedef NET_API_STATUS (NET_API_FUNCTION * NETSTATGET) | ||
184 | (LPWSTR, LPWSTR, DWORD, DWORD, LPBYTE*); | ||
185 | typedef NET_API_STATUS (NET_API_FUNCTION * NETFREE)(LPBYTE); | ||
186 | #endif /* 1 */ | ||
187 | |||
188 | int RAND_poll(void) | ||
189 | { | ||
190 | MEMORYSTATUS m; | ||
191 | HCRYPTPROV hProvider = 0; | ||
192 | BYTE buf[64]; | ||
193 | DWORD w; | ||
194 | HWND h; | ||
195 | |||
196 | HMODULE advapi, kernel, user, netapi; | ||
197 | CRYPTACQUIRECONTEXT acquire = 0; | ||
198 | CRYPTGENRANDOM gen = 0; | ||
199 | CRYPTRELEASECONTEXT release = 0; | ||
200 | #if 1 /* There was previously a problem with NETSTATGET. Currently, this | ||
201 | * section is still experimental, but if all goes well, this conditional | ||
202 | * will be removed | ||
203 | */ | ||
204 | NETSTATGET netstatget = 0; | ||
205 | NETFREE netfree = 0; | ||
206 | #endif /* 1 */ | ||
207 | |||
208 | /* Determine the OS version we are on so we can turn off things | ||
209 | * that do not work properly. | ||
210 | */ | ||
211 | OSVERSIONINFO osverinfo ; | ||
212 | osverinfo.dwOSVersionInfoSize = sizeof(OSVERSIONINFO) ; | ||
213 | GetVersionEx( &osverinfo ) ; | ||
214 | |||
215 | #if defined(OPENSSL_SYS_WINCE) && WCEPLATFORM!=MS_HPC_PRO | ||
216 | /* poll the CryptoAPI PRNG */ | ||
217 | /* The CryptoAPI returns sizeof(buf) bytes of randomness */ | ||
218 | if (CryptAcquireContext(&hProvider, 0, 0, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT)) | ||
219 | { | ||
220 | if (CryptGenRandom(hProvider, sizeof(buf), buf)) | ||
221 | RAND_add(buf, sizeof(buf), sizeof(buf)); | ||
222 | CryptReleaseContext(hProvider, 0); | ||
223 | } | ||
224 | #endif | ||
225 | |||
226 | /* load functions dynamically - not available on all systems */ | ||
227 | advapi = LoadLibrary(TEXT("ADVAPI32.DLL")); | ||
228 | kernel = LoadLibrary(TEXT("KERNEL32.DLL")); | ||
229 | user = LoadLibrary(TEXT("USER32.DLL")); | ||
230 | netapi = LoadLibrary(TEXT("NETAPI32.DLL")); | ||
231 | |||
232 | #ifndef OPENSSL_SYS_WINCE | ||
233 | #if 1 /* There was previously a problem with NETSTATGET. Currently, this | ||
234 | * section is still experimental, but if all goes well, this conditional | ||
235 | * will be removed | ||
236 | */ | ||
237 | if (netapi) | ||
238 | { | ||
239 | netstatget = (NETSTATGET) GetProcAddress(netapi,TEXT("NetStatisticsGet")); | ||
240 | netfree = (NETFREE) GetProcAddress(netapi,TEXT("NetApiBufferFree")); | ||
241 | } | ||
242 | |||
243 | if (netstatget && netfree) | ||
244 | { | ||
245 | LPBYTE outbuf; | ||
246 | /* NetStatisticsGet() is a Unicode only function | ||
247 | * STAT_WORKSTATION_0 contains 45 fields and STAT_SERVER_0 | ||
248 | * contains 17 fields. We treat each field as a source of | ||
249 | * one byte of entropy. | ||
250 | */ | ||
251 | |||
252 | if (netstatget(NULL, L"LanmanWorkstation", 0, 0, &outbuf) == 0) | ||
253 | { | ||
254 | RAND_add(outbuf, sizeof(STAT_WORKSTATION_0), 45); | ||
255 | netfree(outbuf); | ||
256 | } | ||
257 | if (netstatget(NULL, L"LanmanServer", 0, 0, &outbuf) == 0) | ||
258 | { | ||
259 | RAND_add(outbuf, sizeof(STAT_SERVER_0), 17); | ||
260 | netfree(outbuf); | ||
261 | } | ||
262 | } | ||
263 | |||
264 | if (netapi) | ||
265 | FreeLibrary(netapi); | ||
266 | #endif /* 1 */ | ||
267 | #endif /* !OPENSSL_SYS_WINCE */ | ||
268 | |||
269 | #ifndef OPENSSL_SYS_WINCE | ||
270 | /* It appears like this can cause an exception deep within ADVAPI32.DLL | ||
271 | * at random times on Windows 2000. Reported by Jeffrey Altman. | ||
272 | * Only use it on NT. | ||
273 | */ | ||
274 | /* Wolfgang Marczy <WMarczy@topcall.co.at> reports that | ||
275 | * the RegQueryValueEx call below can hang on NT4.0 (SP6). | ||
276 | * So we don't use this at all for now. */ | ||
277 | #if 0 | ||
278 | if ( osverinfo.dwPlatformId == VER_PLATFORM_WIN32_NT && | ||
279 | osverinfo.dwMajorVersion < 5) | ||
280 | { | ||
281 | /* Read Performance Statistics from NT/2000 registry | ||
282 | * The size of the performance data can vary from call | ||
283 | * to call so we must guess the size of the buffer to use | ||
284 | * and increase its size if we get an ERROR_MORE_DATA | ||
285 | * return instead of ERROR_SUCCESS. | ||
286 | */ | ||
287 | LONG rc=ERROR_MORE_DATA; | ||
288 | char * buf=NULL; | ||
289 | DWORD bufsz=0; | ||
290 | DWORD length; | ||
291 | |||
292 | while (rc == ERROR_MORE_DATA) | ||
293 | { | ||
294 | buf = realloc(buf,bufsz+8192); | ||
295 | if (!buf) | ||
296 | break; | ||
297 | bufsz += 8192; | ||
298 | |||
299 | length = bufsz; | ||
300 | rc = RegQueryValueEx(HKEY_PERFORMANCE_DATA, TEXT("Global"), | ||
301 | NULL, NULL, buf, &length); | ||
302 | } | ||
303 | if (rc == ERROR_SUCCESS) | ||
304 | { | ||
305 | /* For entropy count assume only least significant | ||
306 | * byte of each DWORD is random. | ||
307 | */ | ||
308 | RAND_add(&length, sizeof(length), 0); | ||
309 | RAND_add(buf, length, length / 4.0); | ||
310 | |||
311 | /* Close the Registry Key to allow Windows to cleanup/close | ||
312 | * the open handle | ||
313 | * Note: The 'HKEY_PERFORMANCE_DATA' key is implicitly opened | ||
314 | * when the RegQueryValueEx above is done. However, if | ||
315 | * it is not explicitly closed, it can cause disk | ||
316 | * partition manipulation problems. | ||
317 | */ | ||
318 | RegCloseKey(HKEY_PERFORMANCE_DATA); | ||
319 | } | ||
320 | if (buf) | ||
321 | free(buf); | ||
322 | } | ||
323 | #endif | ||
324 | #endif /* !OPENSSL_SYS_WINCE */ | ||
325 | |||
326 | if (advapi) | ||
327 | { | ||
328 | acquire = (CRYPTACQUIRECONTEXT) GetProcAddress(advapi, | ||
329 | TEXT("CryptAcquireContextA")); | ||
330 | gen = (CRYPTGENRANDOM) GetProcAddress(advapi, | ||
331 | TEXT("CryptGenRandom")); | ||
332 | release = (CRYPTRELEASECONTEXT) GetProcAddress(advapi, | ||
333 | TEXT("CryptReleaseContext")); | ||
334 | } | ||
335 | |||
336 | if (acquire && gen && release) | ||
337 | { | ||
338 | /* poll the CryptoAPI PRNG */ | ||
339 | /* The CryptoAPI returns sizeof(buf) bytes of randomness */ | ||
340 | if (acquire(&hProvider, 0, 0, PROV_RSA_FULL, | ||
341 | CRYPT_VERIFYCONTEXT)) | ||
342 | { | ||
343 | if (gen(hProvider, sizeof(buf), buf) != 0) | ||
344 | { | ||
345 | RAND_add(buf, sizeof(buf), 0); | ||
346 | #if 0 | ||
347 | printf("randomness from PROV_RSA_FULL\n"); | ||
348 | #endif | ||
349 | } | ||
350 | release(hProvider, 0); | ||
351 | } | ||
352 | |||
353 | /* poll the Pentium PRG with CryptoAPI */ | ||
354 | if (acquire(&hProvider, 0, INTEL_DEF_PROV, PROV_INTEL_SEC, 0)) | ||
355 | { | ||
356 | if (gen(hProvider, sizeof(buf), buf) != 0) | ||
357 | { | ||
358 | RAND_add(buf, sizeof(buf), sizeof(buf)); | ||
359 | #if 0 | ||
360 | printf("randomness from PROV_INTEL_SEC\n"); | ||
361 | #endif | ||
362 | } | ||
363 | release(hProvider, 0); | ||
364 | } | ||
365 | } | ||
366 | |||
367 | if (advapi) | ||
368 | FreeLibrary(advapi); | ||
369 | |||
370 | /* timer data */ | ||
371 | readtimer(); | ||
372 | |||
373 | /* memory usage statistics */ | ||
374 | GlobalMemoryStatus(&m); | ||
375 | RAND_add(&m, sizeof(m), 1); | ||
376 | |||
377 | /* process ID */ | ||
378 | w = GetCurrentProcessId(); | ||
379 | RAND_add(&w, sizeof(w), 1); | ||
380 | |||
381 | if (user) | ||
382 | { | ||
383 | GETCURSORINFO cursor; | ||
384 | GETFOREGROUNDWINDOW win; | ||
385 | GETQUEUESTATUS queue; | ||
386 | |||
387 | win = (GETFOREGROUNDWINDOW) GetProcAddress(user, TEXT("GetForegroundWindow")); | ||
388 | cursor = (GETCURSORINFO) GetProcAddress(user, TEXT("GetCursorInfo")); | ||
389 | queue = (GETQUEUESTATUS) GetProcAddress(user, TEXT("GetQueueStatus")); | ||
390 | |||
391 | if (win) | ||
392 | { | ||
393 | /* window handle */ | ||
394 | h = win(); | ||
395 | RAND_add(&h, sizeof(h), 0); | ||
396 | } | ||
397 | if (cursor) | ||
398 | { | ||
399 | /* unfortunately, its not safe to call GetCursorInfo() | ||
400 | * on NT4 even though it exists in SP3 (or SP6) and | ||
401 | * higher. | ||
402 | */ | ||
403 | if ( osverinfo.dwPlatformId == VER_PLATFORM_WIN32_NT && | ||
404 | osverinfo.dwMajorVersion < 5) | ||
405 | cursor = 0; | ||
406 | } | ||
407 | if (cursor) | ||
408 | { | ||
409 | /* cursor position */ | ||
410 | /* assume 2 bytes of entropy */ | ||
411 | CURSORINFO ci; | ||
412 | ci.cbSize = sizeof(CURSORINFO); | ||
413 | if (cursor(&ci)) | ||
414 | RAND_add(&ci, ci.cbSize, 2); | ||
415 | } | ||
416 | |||
417 | if (queue) | ||
418 | { | ||
419 | /* message queue status */ | ||
420 | /* assume 1 byte of entropy */ | ||
421 | w = queue(QS_ALLEVENTS); | ||
422 | RAND_add(&w, sizeof(w), 1); | ||
423 | } | ||
424 | |||
425 | FreeLibrary(user); | ||
426 | } | ||
427 | |||
428 | /* Toolhelp32 snapshot: enumerate processes, threads, modules and heap | ||
429 | * http://msdn.microsoft.com/library/psdk/winbase/toolhelp_5pfd.htm | ||
430 | * (Win 9x and 2000 only, not available on NT) | ||
431 | * | ||
432 | * This seeding method was proposed in Peter Gutmann, Software | ||
433 | * Generation of Practically Strong Random Numbers, | ||
434 | * http://www.usenix.org/publications/library/proceedings/sec98/gutmann.html | ||
435 | * revised version at http://www.cryptoengines.com/~peter/06_random.pdf | ||
436 | * (The assignment of entropy estimates below is arbitrary, but based | ||
437 | * on Peter's analysis the full poll appears to be safe. Additional | ||
438 | * interactive seeding is encouraged.) | ||
439 | */ | ||
440 | |||
441 | if (kernel) | ||
442 | { | ||
443 | CREATETOOLHELP32SNAPSHOT snap; | ||
444 | CLOSETOOLHELP32SNAPSHOT close_snap; | ||
445 | HANDLE handle; | ||
446 | |||
447 | HEAP32FIRST heap_first; | ||
448 | HEAP32NEXT heap_next; | ||
449 | HEAP32LIST heaplist_first, heaplist_next; | ||
450 | PROCESS32 process_first, process_next; | ||
451 | THREAD32 thread_first, thread_next; | ||
452 | MODULE32 module_first, module_next; | ||
453 | |||
454 | HEAPLIST32 hlist; | ||
455 | HEAPENTRY32 hentry; | ||
456 | PROCESSENTRY32 p; | ||
457 | THREADENTRY32 t; | ||
458 | MODULEENTRY32 m; | ||
459 | |||
460 | snap = (CREATETOOLHELP32SNAPSHOT) | ||
461 | GetProcAddress(kernel, TEXT("CreateToolhelp32Snapshot")); | ||
462 | close_snap = (CLOSETOOLHELP32SNAPSHOT) | ||
463 | GetProcAddress(kernel, TEXT("CloseToolhelp32Snapshot")); | ||
464 | heap_first = (HEAP32FIRST) GetProcAddress(kernel, TEXT("Heap32First")); | ||
465 | heap_next = (HEAP32NEXT) GetProcAddress(kernel, TEXT("Heap32Next")); | ||
466 | heaplist_first = (HEAP32LIST) GetProcAddress(kernel, TEXT("Heap32ListFirst")); | ||
467 | heaplist_next = (HEAP32LIST) GetProcAddress(kernel, TEXT("Heap32ListNext")); | ||
468 | process_first = (PROCESS32) GetProcAddress(kernel, TEXT("Process32First")); | ||
469 | process_next = (PROCESS32) GetProcAddress(kernel, TEXT("Process32Next")); | ||
470 | thread_first = (THREAD32) GetProcAddress(kernel, TEXT("Thread32First")); | ||
471 | thread_next = (THREAD32) GetProcAddress(kernel, TEXT("Thread32Next")); | ||
472 | module_first = (MODULE32) GetProcAddress(kernel, TEXT("Module32First")); | ||
473 | module_next = (MODULE32) GetProcAddress(kernel, TEXT("Module32Next")); | ||
474 | |||
475 | if (snap && heap_first && heap_next && heaplist_first && | ||
476 | heaplist_next && process_first && process_next && | ||
477 | thread_first && thread_next && module_first && | ||
478 | module_next && (handle = snap(TH32CS_SNAPALL,0)) | ||
479 | != INVALID_HANDLE_VALUE) | ||
480 | { | ||
481 | /* heap list and heap walking */ | ||
482 | /* HEAPLIST32 contains 3 fields that will change with | ||
483 | * each entry. Consider each field a source of 1 byte | ||
484 | * of entropy. | ||
485 | * HEAPENTRY32 contains 5 fields that will change with | ||
486 | * each entry. Consider each field a source of 1 byte | ||
487 | * of entropy. | ||
488 | */ | ||
489 | hlist.dwSize = sizeof(HEAPLIST32); | ||
490 | if (heaplist_first(handle, &hlist)) | ||
491 | do | ||
492 | { | ||
493 | RAND_add(&hlist, hlist.dwSize, 3); | ||
494 | hentry.dwSize = sizeof(HEAPENTRY32); | ||
495 | if (heap_first(&hentry, | ||
496 | hlist.th32ProcessID, | ||
497 | hlist.th32HeapID)) | ||
498 | { | ||
499 | int entrycnt = 80; | ||
500 | do | ||
501 | RAND_add(&hentry, | ||
502 | hentry.dwSize, 5); | ||
503 | while (heap_next(&hentry) | ||
504 | && --entrycnt > 0); | ||
505 | } | ||
506 | } while (heaplist_next(handle, | ||
507 | &hlist)); | ||
508 | |||
509 | /* process walking */ | ||
510 | /* PROCESSENTRY32 contains 9 fields that will change | ||
511 | * with each entry. Consider each field a source of | ||
512 | * 1 byte of entropy. | ||
513 | */ | ||
514 | p.dwSize = sizeof(PROCESSENTRY32); | ||
515 | if (process_first(handle, &p)) | ||
516 | do | ||
517 | RAND_add(&p, p.dwSize, 9); | ||
518 | while (process_next(handle, &p)); | ||
519 | |||
520 | /* thread walking */ | ||
521 | /* THREADENTRY32 contains 6 fields that will change | ||
522 | * with each entry. Consider each field a source of | ||
523 | * 1 byte of entropy. | ||
524 | */ | ||
525 | t.dwSize = sizeof(THREADENTRY32); | ||
526 | if (thread_first(handle, &t)) | ||
527 | do | ||
528 | RAND_add(&t, t.dwSize, 6); | ||
529 | while (thread_next(handle, &t)); | ||
530 | |||
531 | /* module walking */ | ||
532 | /* MODULEENTRY32 contains 9 fields that will change | ||
533 | * with each entry. Consider each field a source of | ||
534 | * 1 byte of entropy. | ||
535 | */ | ||
536 | m.dwSize = sizeof(MODULEENTRY32); | ||
537 | if (module_first(handle, &m)) | ||
538 | do | ||
539 | RAND_add(&m, m.dwSize, 9); | ||
540 | while (module_next(handle, &m)); | ||
541 | if (close_snap) | ||
542 | close_snap(handle); | ||
543 | else | ||
544 | CloseHandle(handle); | ||
545 | } | ||
546 | |||
547 | FreeLibrary(kernel); | ||
548 | } | ||
549 | |||
550 | #if 0 | ||
551 | printf("Exiting RAND_poll\n"); | ||
552 | #endif | ||
553 | |||
554 | return(1); | ||
555 | } | ||
556 | |||
557 | int RAND_event(UINT iMsg, WPARAM wParam, LPARAM lParam) | ||
558 | { | ||
559 | double add_entropy=0; | ||
560 | |||
561 | switch (iMsg) | ||
562 | { | ||
563 | case WM_KEYDOWN: | ||
564 | { | ||
565 | static WPARAM key; | ||
566 | if (key != wParam) | ||
567 | add_entropy = 0.05; | ||
568 | key = wParam; | ||
569 | } | ||
570 | break; | ||
571 | case WM_MOUSEMOVE: | ||
572 | { | ||
573 | static int lastx,lasty,lastdx,lastdy; | ||
574 | int x,y,dx,dy; | ||
575 | |||
576 | x=LOWORD(lParam); | ||
577 | y=HIWORD(lParam); | ||
578 | dx=lastx-x; | ||
579 | dy=lasty-y; | ||
580 | if (dx != 0 && dy != 0 && dx-lastdx != 0 && dy-lastdy != 0) | ||
581 | add_entropy=.2; | ||
582 | lastx=x, lasty=y; | ||
583 | lastdx=dx, lastdy=dy; | ||
584 | } | ||
585 | break; | ||
586 | } | ||
587 | |||
588 | readtimer(); | ||
589 | RAND_add(&iMsg, sizeof(iMsg), add_entropy); | ||
590 | RAND_add(&wParam, sizeof(wParam), 0); | ||
591 | RAND_add(&lParam, sizeof(lParam), 0); | ||
592 | |||
593 | return (RAND_status()); | ||
594 | } | ||
595 | |||
596 | |||
597 | void RAND_screen(void) /* function available for backward compatibility */ | ||
598 | { | ||
599 | RAND_poll(); | ||
600 | readscreen(); | ||
601 | } | ||
602 | |||
603 | |||
604 | /* feed timing information to the PRNG */ | ||
605 | static void readtimer(void) | ||
606 | { | ||
607 | DWORD w; | ||
608 | LARGE_INTEGER l; | ||
609 | static int have_perfc = 1; | ||
610 | #if defined(_MSC_VER) && !defined(OPENSSL_SYS_WINCE) | ||
611 | static int have_tsc = 1; | ||
612 | DWORD cyclecount; | ||
613 | |||
614 | if (have_tsc) { | ||
615 | __try { | ||
616 | __asm { | ||
617 | _emit 0x0f | ||
618 | _emit 0x31 | ||
619 | mov cyclecount, eax | ||
620 | } | ||
621 | RAND_add(&cyclecount, sizeof(cyclecount), 1); | ||
622 | } __except(EXCEPTION_EXECUTE_HANDLER) { | ||
623 | have_tsc = 0; | ||
624 | } | ||
625 | } | ||
626 | #else | ||
627 | # define have_tsc 0 | ||
628 | #endif | ||
629 | |||
630 | if (have_perfc) { | ||
631 | if (QueryPerformanceCounter(&l) == 0) | ||
632 | have_perfc = 0; | ||
633 | else | ||
634 | RAND_add(&l, sizeof(l), 0); | ||
635 | } | ||
636 | |||
637 | if (!have_tsc && !have_perfc) { | ||
638 | w = GetTickCount(); | ||
639 | RAND_add(&w, sizeof(w), 0); | ||
640 | } | ||
641 | } | ||
642 | |||
643 | /* feed screen contents to PRNG */ | ||
644 | /***************************************************************************** | ||
645 | * | ||
646 | * Created 960901 by Gertjan van Oosten, gertjan@West.NL, West Consulting B.V. | ||
647 | * | ||
648 | * Code adapted from | ||
649 | * <URL:http://support.microsoft.com/default.aspx?scid=kb;[LN];97193>; | ||
650 | * the original copyright message is: | ||
651 | * | ||
652 | * (C) Copyright Microsoft Corp. 1993. All rights reserved. | ||
653 | * | ||
654 | * You have a royalty-free right to use, modify, reproduce and | ||
655 | * distribute the Sample Files (and/or any modified version) in | ||
656 | * any way you find useful, provided that you agree that | ||
657 | * Microsoft has no warranty obligations or liability for any | ||
658 | * Sample Application Files which are modified. | ||
659 | */ | ||
660 | |||
661 | static void readscreen(void) | ||
662 | { | ||
663 | #ifndef OPENSSL_SYS_WINCE | ||
664 | HDC hScrDC; /* screen DC */ | ||
665 | HDC hMemDC; /* memory DC */ | ||
666 | HBITMAP hBitmap; /* handle for our bitmap */ | ||
667 | HBITMAP hOldBitmap; /* handle for previous bitmap */ | ||
668 | BITMAP bm; /* bitmap properties */ | ||
669 | unsigned int size; /* size of bitmap */ | ||
670 | char *bmbits; /* contents of bitmap */ | ||
671 | int w; /* screen width */ | ||
672 | int h; /* screen height */ | ||
673 | int y; /* y-coordinate of screen lines to grab */ | ||
674 | int n = 16; /* number of screen lines to grab at a time */ | ||
675 | |||
676 | /* Create a screen DC and a memory DC compatible to screen DC */ | ||
677 | hScrDC = CreateDC(TEXT("DISPLAY"), NULL, NULL, NULL); | ||
678 | hMemDC = CreateCompatibleDC(hScrDC); | ||
679 | |||
680 | /* Get screen resolution */ | ||
681 | w = GetDeviceCaps(hScrDC, HORZRES); | ||
682 | h = GetDeviceCaps(hScrDC, VERTRES); | ||
683 | |||
684 | /* Create a bitmap compatible with the screen DC */ | ||
685 | hBitmap = CreateCompatibleBitmap(hScrDC, w, n); | ||
686 | |||
687 | /* Select new bitmap into memory DC */ | ||
688 | hOldBitmap = SelectObject(hMemDC, hBitmap); | ||
689 | |||
690 | /* Get bitmap properties */ | ||
691 | GetObject(hBitmap, sizeof(BITMAP), (LPSTR)&bm); | ||
692 | size = (unsigned int)bm.bmWidthBytes * bm.bmHeight * bm.bmPlanes; | ||
693 | |||
694 | bmbits = OPENSSL_malloc(size); | ||
695 | if (bmbits) { | ||
696 | /* Now go through the whole screen, repeatedly grabbing n lines */ | ||
697 | for (y = 0; y < h-n; y += n) | ||
698 | { | ||
699 | unsigned char md[MD_DIGEST_LENGTH]; | ||
700 | |||
701 | /* Bitblt screen DC to memory DC */ | ||
702 | BitBlt(hMemDC, 0, 0, w, n, hScrDC, 0, y, SRCCOPY); | ||
703 | |||
704 | /* Copy bitmap bits from memory DC to bmbits */ | ||
705 | GetBitmapBits(hBitmap, size, bmbits); | ||
706 | |||
707 | /* Get the hash of the bitmap */ | ||
708 | MD(bmbits,size,md); | ||
709 | |||
710 | /* Seed the random generator with the hash value */ | ||
711 | RAND_add(md, MD_DIGEST_LENGTH, 0); | ||
712 | } | ||
713 | |||
714 | OPENSSL_free(bmbits); | ||
715 | } | ||
716 | |||
717 | /* Select old bitmap back into memory DC */ | ||
718 | hBitmap = SelectObject(hMemDC, hOldBitmap); | ||
719 | |||
720 | /* Clean up */ | ||
721 | DeleteObject(hBitmap); | ||
722 | DeleteDC(hMemDC); | ||
723 | DeleteDC(hScrDC); | ||
724 | #endif /* !OPENSSL_SYS_WINCE */ | ||
725 | } | ||
726 | |||
727 | #endif | ||