mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-04-04 11:36:06 +02:00
4de8b1043a
Move the PSA internal RNG functions (i.e. the parts of the PSA random generator that are used when `MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG` is not enabled) to a separate source file. `mbedtls_psa_crypto_configure_entropy_sources` stays where it is, at least for now, because it accesses global data directly and because I have no immediate reason to move it. Refactoring only, no behavior change. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
73 lines
2.0 KiB
C
73 lines
2.0 KiB
C
/*
|
|
* PSA crypto random generator internal functions.
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
*/
|
|
|
|
#ifndef PSA_CRYPTO_RANDOM_H
|
|
#define PSA_CRYPTO_RANDOM_H
|
|
|
|
#include "common.h"
|
|
|
|
#if !defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG)
|
|
|
|
#include <psa/crypto.h>
|
|
#include "psa_crypto_random_impl.h"
|
|
|
|
/** Initialize the PSA random generator.
|
|
*
|
|
* \param[out] rng The random generator context to initialize.
|
|
*/
|
|
void psa_random_internal_init(mbedtls_psa_random_context_t *rng);
|
|
|
|
/** Deinitialize the PSA random generator.
|
|
*
|
|
* \param[in,out] rng The random generator context to deinitialize.
|
|
*/
|
|
void psa_random_internal_free(mbedtls_psa_random_context_t *rng);
|
|
|
|
/** Seed the PSA random generator.
|
|
*
|
|
* \note This function is not thread-safe.
|
|
*
|
|
* \param[in,out] rng The random generator context to seed.
|
|
*
|
|
* \retval #PSA_SUCCESS
|
|
* Success.
|
|
* \retval #PSA_ERROR_INSUFFICIENT_ENTROPY
|
|
* The entropy source failed.
|
|
*/
|
|
psa_status_t psa_random_internal_seed(mbedtls_psa_random_context_t *rng);
|
|
|
|
/**
|
|
* \brief Generate random bytes. Like psa_generate_random(), but for use
|
|
* inside the library.
|
|
*
|
|
* This function is thread-safe.
|
|
*
|
|
* \warning This function **can** fail! Callers MUST check the return status
|
|
* and MUST NOT use the content of the output buffer if the return
|
|
* status is not #PSA_SUCCESS.
|
|
*
|
|
* \param[in,out] rng The random generator context to seed.
|
|
* \param[out] output Output buffer for the generated data.
|
|
* \param output_size Number of bytes to generate and output.
|
|
*
|
|
* \retval #PSA_SUCCESS
|
|
* Success.
|
|
* \retval #PSA_ERROR_INSUFFICIENT_ENTROPY
|
|
* The random generator needed to reseed, and the entropy
|
|
* source failed.
|
|
* \retval #PSA_ERROR_HARDWARE_FAILURE
|
|
* A hardware accelerator failed.
|
|
*/
|
|
psa_status_t psa_random_internal_generate(
|
|
mbedtls_psa_random_context_t *rng,
|
|
uint8_t *output, size_t output_size);
|
|
|
|
#endif /* !defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG) */
|
|
|
|
#endif /* PSA_CRYPTO_RANDOM_H */
|