You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

onetimepad.cpp 11KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160
  1. // onetimepad.cpp
  2. // Copyright (C) 2006-2007 MicroNeil Research Corporation
  3. #include "onetimepad.hpp"
  4. #include "timing.hpp"
  5. namespace CodeDweller {
  6. /*
  7. class OneTimePad { // One Time Pad generator.
  8. private:
  9. MANGLER PagGenerator; // MANGLER as a PRNG.
  10. PadBuffer Entropy(int Length = 1024); // System entropy source.
  11. public:
  12. ** OneTimePad(); // Constructor initializes w/ Entropy.
  13. ** PadBuffer Pad(int Length); // Get a pad of Length.
  14. ** void addEntropy(); // Add entropy from the system source.
  15. ** void addEntropy(PadBuffer Entropy); // Add entropy from this source.
  16. };
  17. */
  18. ////////////////////////////////////////////////////////////////////////////////
  19. // Platform specific strong entropy sourcing.
  20. #ifdef WIN32
  21. //// WIN32 Strong Entropy Source == CryptGenRandom() ///////////////////////////
  22. #include <windows.h>
  23. #include <wincrypt.h>
  24. PadBuffer OneTimePad::Entropy(int Length) { // Get a PadBuffer full of randomness.
  25. PadBuffer Buffer(Length, 0); // Start by initializing the buffer.
  26. HCRYPTPROV provider = 0; // We will need a handle for the source.
  27. if( // Try a two different sources.
  28. !CryptAcquireContext( // If we can get a hardware source
  29. &provider, NULL, NULL, PROV_INTEL_SEC, CRYPT_VERIFYCONTEXT)) { // from an intel CPU then use that first.
  30. if( // If we can't use get that
  31. !CryptAcquireContext( // entropy source for some reason then
  32. &provider, NULL, NULL, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT)) { // try to use the RSA source. That should
  33. // always work, but if it doesn't we need
  34. provider = 0; // to know about it so we'll have a zero
  35. } // handle.
  36. }
  37. if(0 != provider) { // If we did get a good source then
  38. CryptGenRandom (provider, Length, (BYTE*)&Buffer[0]); // grab the random bit required and
  39. CryptReleaseContext(provider,0); // then let the provider go.
  40. StrongEntropyFlag = true; // We DID get strong entropy.
  41. }
  42. else { // If we did not get a good source
  43. StrongEntropyFlag = false; // then we are not strong.
  44. }
  45. return Buffer; // Return the data we got.
  46. }
  47. #else
  48. //// *NIX Strong Entropy Source == /dev/urandom ////////////////////////////////
  49. #include <fstream>
  50. PadBuffer OneTimePad::Entropy(int Length) { // Get Length bytes of strong entropy.
  51. PadBuffer Buffer(Length, 0); // Initialize a buffer to hold them.
  52. try { // Handle this in a try block.
  53. ifstream Source("/dev/urandom", ios::binary); // Open /dev/urandom if possible.
  54. Source.read(reinterpret_cast<char*>(&Buffer[0]), Length); // Read data into the buffer.
  55. if(!Source.bad() && Source.gcount() == Length) { // If we got what we came for then
  56. StrongEntropyFlag = true; // we have strong cryptography.
  57. } else { // If we didn't then we are not
  58. StrongEntropyFlag = false; // strong, and don't have things
  59. } // to make us go.
  60. Source.close(); // We're done, so close the stream.
  61. }
  62. catch(...) { // If we had an exception then we
  63. StrongEntropyFlag = false; // did not get strong entropy.
  64. }
  65. return Buffer; // Return the buffer.
  66. }
  67. #endif
  68. // End Platform Specific Bits
  69. ////////////////////////////////////////////////////////////////////////////////
  70. // Lightweight entropy is built from a combination of the time in ms UTC that
  71. // the application was started, the number of milliseconds since that time in
  72. // milliseconds, the number and times of calls to addLightweightEntropy(), and
  73. // the state of the MANGLER engine at each call -- that state is effected by
  74. // the combined previous use of the MANGLER and any other entropy that was
  75. // added including the timing of those events (since they all trigger the
  76. // addLightweightEntropy() function.
  77. Timer OneTimePadRunTimer; // Millisecond entropy source.
  78. msclock LightweightEntropyBuffer; // Lightweight entropy bucket.
  79. void OneTimePad::addLightweightEntropy() { // Add entropy based on the
  80. msclock StartFill = OneTimePadRunTimer.getStartClock(); // initial start time of the app
  81. msclock ElapsedFill = OneTimePadRunTimer.getElapsedTime(); // and the number of millisecs since.
  82. msclock CombinedFill = StartFill ^ ElapsedFill; // XOR the two together to combine.
  83. CombinedFill = CombinedFill ^ LightweightEntropyBuffer; // Pick up some previous state entropy.
  84. unsigned char* PrimerBuffer = (unsigned char*) &CombinedFill; // Treat the value as a bunch of bytes.
  85. unsigned char* EntropyBuffer = (unsigned char*) &LightweightEntropyBuffer; // Likewise with the entropy buffer.
  86. for(int i = 0; i < sizeof(msclock); i++) { // Fold bytes into the mangler one
  87. EntropyBuffer[i] += // byte at a time, capturing the
  88. PadGenerator.Encrypt( // the results and using one extra
  89. PadGenerator.Encrypt(PrimerBuffer[i])); // round per byte to increase the
  90. } // amount of guessing an attacker
  91. } // needs to do.
  92. void OneTimePad::addEntropy() { // Add strong entropy if available.
  93. PadBuffer Fill = Entropy(); // Grab the entropy bits to add.
  94. for(int i = 0; i < Fill.size(); i++) { // Pump them in one byte at a
  95. PadGenerator.Encrypt( // time and then run an extra
  96. PadGenerator.Encrypt(Fill.at(i))); // round per byte to increase the
  97. } // amount of guessing an attacker
  98. } // needs to do.
  99. void OneTimePad::addEntropy(PadBuffer Entropy) { // Add entropy from a given source.
  100. addLightweightEntropy(); // Start with some lightweight entropy.
  101. for(int i = 0; i < Entropy.size(); i++) { // Then loop through the provided
  102. PadGenerator.Encrypt( // entropy and mix it in with one
  103. PadGenerator.Encrypt(Entropy.at(i))); // extra round per byte to increase
  104. } // the amount of guessing an attacker
  105. } // needs to do.
  106. PadBuffer OneTimePad::Pad(int Length) { // Grab a pad of a specific length.
  107. addLightweightEntropy(); // Add some lightweight entropy.
  108. PadBuffer Output; Output.reserve(Length); // Create a buffer the right size.
  109. unsigned char x; // Starting with an uninitialized
  110. for(int i = 0; i < Length; i++) // char, fill the buffer with
  111. Output.push_back(x = PadGenerator.Encrypt(x)); // random bytes from the mangler.
  112. return Output; // Return the new pad.
  113. }
  114. void* OneTimePad::fill(void* Object, int Size) { // Fill *Object with random bytes.
  115. PadBuffer FillData = Pad(Size); // Get a Pad of the correct size.
  116. unsigned char* Ptr = reinterpret_cast<unsigned char*>(Object); // Reinterpret the pointer type.
  117. for(int i = 0; i < Size; i++) Ptr[i] = FillData.at(i); // Fill the object with the Pad.
  118. return Object; // Return the object.
  119. }
  120. bool OneTimePad::isStrong() { return StrongEntropyFlag; } // Tell them if I'm strong!
  121. OneTimePad::OneTimePad() { // Initialize the one time pad.
  122. addLightweightEntropy(); // Add lightweight entropy.
  123. addEntropy(); // Add cryptographic entropy.
  124. unsigned char x; // Starting with an uninitialized
  125. for(int i = 0; i < 1024; i++) { // character, run 1024 rounds to
  126. x = PadGenerator.Encrypt(x); // reduce the predictability of the
  127. } // initial Mangler state.
  128. } // The OneTimePad object is ready.
  129. }