2 This file is part of systemd.
4 Copyright 2010 Lennart Poettering
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
26 #include <linux/random.h>
29 #ifdef HAVE_SYS_AUXV_H
30 # include <sys/auxv.h>
33 #ifdef USE_SYS_RANDOM_H
34 # include <sys/random.h>
36 # include <linux/random.h>
42 #include "random-util.h"
43 #include "time-util.h"
45 int dev_urandom(void *p, size_t n) {
46 static int have_syscall = -1;
48 _cleanup_close_ int fd = -1;
51 /* Gathers some randomness from the kernel. This call will
52 * never block, and will always return some data from the
53 * kernel, regardless if the random pool is fully initialized
54 * or not. It thus makes no guarantee for the quality of the
55 * returned entropy, but is good enough for our usual usecases
56 * of seeding the hash functions for hashtable */
58 /* Use the getrandom() syscall unless we know we don't have
59 * it, or when the requested size is too large for it. */
60 if (have_syscall != 0 || (size_t) (int) n != n) {
61 r = getrandom(p, n, GRND_NONBLOCK);
69 /* we lack the syscall, continue with
70 * reading from /dev/urandom */
72 else if (errno == EAGAIN)
73 /* not enough entropy for now. Let's
74 * remember to use the syscall the
75 * next time, again, but also read
76 * from /dev/urandom for now, which
77 * doesn't care about the current
78 * amount of entropy. */
87 fd = open("/dev/urandom", O_RDONLY|O_CLOEXEC|O_NOCTTY);
89 return errno == ENOENT ? -ENOSYS : -errno;
91 return loop_read_exact(fd, p, n, true);
94 void initialize_srand(void) {
95 static bool srand_called = false;
97 #ifdef HAVE_SYS_AUXV_H
104 #ifdef HAVE_SYS_AUXV_H
105 /* The kernel provides us with 16 bytes of entropy in auxv, so let's try to make use of that to seed the
106 * pseudo-random generator. It's better than nothing... */
108 auxv = (void*) getauxval(AT_RANDOM);
110 assert_cc(sizeof(x) < 16);
111 memcpy(&x, auxv, sizeof(x));
117 x ^= (unsigned) now(CLOCK_REALTIME);
118 x ^= (unsigned) gettid();
124 void random_bytes(void *p, size_t n) {
128 r = dev_urandom(p, n);
132 /* If some idiot made /dev/urandom unavailable to us, he'll
133 * get a PRNG instead. */
137 for (q = p; q < (uint8_t*) p + n; q ++)