72f3d8e36a
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@273 ec53bebd-3082-4978-b11e-865c3cabbd6b
160 lines
3.4 KiB
C
160 lines
3.4 KiB
C
#include "des_locl.h"
|
|
|
|
RCSID("$Id$");
|
|
|
|
#include <sys/time.h>
|
|
|
|
#include <unistd.h>
|
|
#ifdef HAVE_SYS_IOCTL_H
|
|
#include <sys/ioctl.h>
|
|
#endif
|
|
|
|
#include <sys/types.h>
|
|
#include <sys/socket.h>
|
|
#include <netinet/in.h>
|
|
#include <netdb.h>
|
|
|
|
/* this is for broken Solaris */
|
|
#ifndef HAVE_GETHOSTID
|
|
|
|
#include <sys/systeminfo.h>
|
|
|
|
static long gethostid(void)
|
|
{
|
|
static int flag=0;
|
|
static long hostid;
|
|
if(!flag){
|
|
char s[32];
|
|
sysinfo(SI_HW_SERIAL, s, 32);
|
|
sscanf(s, "%u", &hostid);
|
|
flag=1;
|
|
}
|
|
return hostid;
|
|
}
|
|
#endif
|
|
|
|
/*
|
|
* Create a sequence of random 64 bit blocks.
|
|
* The sequence is indexed with a long long and
|
|
* based on an initial des key used as a seed.
|
|
*/
|
|
static des_key_schedule sequence_seed;
|
|
static u_int32_t sequence_index[2];
|
|
|
|
/*
|
|
* In case the generator does not get inited use this for backup.
|
|
*/
|
|
static int initialized;
|
|
static des_cblock default_seed = {0x01,0x23,0x45,0x67,0x89,0xab,0xcd,0xef};
|
|
static void
|
|
do_initialize(void)
|
|
{
|
|
des_set_odd_parity(&default_seed);
|
|
des_set_random_generator_seed(&default_seed);
|
|
}
|
|
|
|
#define zero_long_long(ll) do { ll[0] = ll[1] = 0; } while (0)
|
|
|
|
#define incr_long_long(ll) do { if (++ll[0] == 0) ++ll[1]; } while (0)
|
|
|
|
#define set_sequence_number(ll) \
|
|
memcpy((char *)sequence_index, (ll), sizeof(sequence_index));
|
|
|
|
/*
|
|
* Set the sequnce number to this value (a long long).
|
|
*/
|
|
void
|
|
des_set_sequence_number(unsigned char *ll)
|
|
{
|
|
set_sequence_number(ll);
|
|
}
|
|
|
|
/*
|
|
* Set the generator seed and reset the sequence number to 0.
|
|
*/
|
|
void
|
|
des_set_random_generator_seed(des_cblock *seed)
|
|
{
|
|
des_key_sched(seed, sequence_seed);
|
|
zero_long_long(sequence_index);
|
|
initialized = 1;
|
|
}
|
|
|
|
/*
|
|
* Generate a sequence of random des keys
|
|
* using the random block sequence, fixup
|
|
* parity and skip weak keys.
|
|
*/
|
|
int
|
|
des_new_random_key(des_cblock *key)
|
|
{
|
|
if (!initialized)
|
|
do_initialize();
|
|
|
|
try_again:
|
|
des_ecb_encrypt((des_cblock *) sequence_index,
|
|
key,
|
|
sequence_seed,
|
|
DES_ENCRYPT);
|
|
incr_long_long(sequence_index);
|
|
/* random key must have odd parity and not be weak */
|
|
des_set_odd_parity(key);
|
|
if (des_is_weak_key(key))
|
|
goto try_again;
|
|
return(0);
|
|
}
|
|
|
|
/*
|
|
* des_init_random_number_generator:
|
|
*
|
|
* Initialize the sequence of random 64 bit blocks. The input seed
|
|
* can be a secret key since it should be well hidden and is also not
|
|
* keept.
|
|
*
|
|
*/
|
|
void
|
|
des_init_random_number_generator(des_cblock *seed)
|
|
{
|
|
struct timeval now;
|
|
static long uniq[2];
|
|
des_cblock new_key;
|
|
|
|
gettimeofday(&now, (struct timezone *)0);
|
|
if (!uniq[0])
|
|
{
|
|
struct hostent *hent;
|
|
char hostname[100];
|
|
gethostname(hostname, sizeof(hostname));
|
|
hent = gethostbyname(hostname);
|
|
if (hent != NULL)
|
|
bcopy(hent->h_addr_list[0], &uniq[0], sizeof(uniq[0]));
|
|
else
|
|
uniq[0] = gethostid();
|
|
#ifdef MSDOS
|
|
uniq[1] = 1;
|
|
#else
|
|
uniq[1] = getpid();
|
|
#endif
|
|
}
|
|
|
|
/* Pick a unique random key from the shared sequence. */
|
|
des_set_random_generator_seed(seed);
|
|
set_sequence_number((unsigned char *)uniq);
|
|
des_new_random_key(&new_key);
|
|
|
|
/* Select a new nonshared sequence, */
|
|
des_set_random_generator_seed(&new_key);
|
|
|
|
/* and use the current time to pick a key for the new sequence. */
|
|
set_sequence_number((unsigned char *)&now);
|
|
des_new_random_key(&new_key);
|
|
des_set_random_generator_seed(&new_key);
|
|
}
|
|
|
|
/* This is for backwards compatibility. */
|
|
int
|
|
des_random_key(unsigned char *ret)
|
|
{
|
|
return des_new_random_key((des_cblock *) ret);
|
|
}
|