1 files changed, 27 insertions, 17 deletions
diff --git a/src/lib/entropy/rdrand/rdrand.cpp b/src/lib/entropy/rdrand/rdrand.cpp
index 24fe98cf8..36eaebee3 100644
--- a/src/lib/entropy/rdrand/rdrand.cpp
+++ b/src/lib/entropy/rdrand/rdrand.cpp
@@ -7,39 +7,49 @@
 
 #include <botan/internal/rdrand.h>
 #include <botan/cpuid.h>
+#include <botan/exceptn.h>
+#include <botan/build.h>
 
 #if !defined(BOTAN_USE_GCC_INLINE_ASM)
   #include <immintrin.h>
 #endif
 
-namespace Botan {
-
-/*
-* Get the timestamp
-*/
-void Intel_Rdrand::poll(Entropy_Accumulator& accum)
-   {
-   if(!CPUID::has_rdrand())
-      return;
+// RDRAND is guaranteed to generate a random number within 10 retries on a working CPU
+#define INTEL_RDRAND_RETRIES 10
 
-   const size_t RDRAND_POLLS = 32;
+namespace Botan {
 
-   for(size_t i = 0; i != RDRAND_POLLS; ++i)
+uint32_t Intel_Rdrand::get32BitRandom() {
+   for ( size_t i = 0; i != INTEL_RDRAND_RETRIES; ++i )
       {
-      unsigned int r = 0;
+      uint32_t r = 0;
 
 #if defined(BOTAN_USE_GCC_INLINE_ASM)
       int cf = 0;
 
       // Encoding of rdrand %eax
-      asm(".byte 0x0F, 0xC7, 0xF0; adcl $0,%1" :
-          "=a" (r), "=r" (cf) : "0" (r), "1" (cf) : "cc");
+      asm( ".byte 0x0F, 0xC7, 0xF0; adcl $0,%1" :
+           "=a" ( r ), "=r" ( cf ) : "0" ( r ), "1" ( cf ) : "cc" );
 #else
-      int cf = _rdrand32_step(&r);
+      int cf = _rdrand32_step( &r );
 #endif
+      if ( 1 == cf )
+         {
+         return r;
+         }
+      }
+
+   throw Internal_Error( "RdRand failed after " + std::to_string( INTEL_RDRAND_RETRIES ) + " retries" );
+   }
 
-      if(cf == 1)
-         accum.add(r, BOTAN_ENTROPY_ESTIMATE_HARDWARE_RNG);
+void Intel_Rdrand::poll( Entropy_Accumulator& accum ) {
+   if ( !CPUID::has_rdrand() )
+      return;
+
+   for ( size_t i = 0; i != BOTAN_ENTROPY_INTEL_RNG_POLLS; ++i )
+      {
+      uint32_t random = get32BitRandom();
+      accum.add( random, BOTAN_ENTROPY_ESTIMATE_HARDWARE_RNG );
       }
    }