aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/entropy/rdrand/rdrand.cpp
blob: 36eaebee36c81df98610c18ace6276e0bc0d75c7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
/*
* Entropy Source Using Intel's rdrand instruction
* (C) 2012,2015 Jack Lloyd
*
* Botan is released under the Simplified BSD License (see license.txt)
*/

#include <botan/internal/rdrand.h>
#include <botan/cpuid.h>
#include <botan/exceptn.h>
#include <botan/build.h>

#if !defined(BOTAN_USE_GCC_INLINE_ASM)
  #include <immintrin.h>
#endif

// RDRAND is guaranteed to generate a random number within 10 retries on a working CPU
#define INTEL_RDRAND_RETRIES 10

namespace Botan {

uint32_t Intel_Rdrand::get32BitRandom() {
   for ( size_t i = 0; i != INTEL_RDRAND_RETRIES; ++i )
      {
      uint32_t r = 0;

#if defined(BOTAN_USE_GCC_INLINE_ASM)
      int cf = 0;

      // Encoding of rdrand %eax
      asm( ".byte 0x0F, 0xC7, 0xF0; adcl $0,%1" :
           "=a" ( r ), "=r" ( cf ) : "0" ( r ), "1" ( cf ) : "cc" );
#else
      int cf = _rdrand32_step( &r );
#endif
      if ( 1 == cf )
         {
         return r;
         }
      }

   throw Internal_Error( "RdRand failed after " + std::to_string( INTEL_RDRAND_RETRIES ) + " retries" );
   }

void Intel_Rdrand::poll( Entropy_Accumulator& accum ) {
   if ( !CPUID::has_rdrand() )
      return;

   for ( size_t i = 0; i != BOTAN_ENTROPY_INTEL_RNG_POLLS; ++i )
      {
      uint32_t random = get32BitRandom();
      accum.add( random, BOTAN_ENTROPY_ESTIMATE_HARDWARE_RNG );
      }
   }

}