2
0

rand_win.c 28 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752
  1. /* crypto/rand/rand_win.c */
  2. /* Copyright (C) 1995-1998 Eric Young ([email protected])
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young ([email protected]).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson ([email protected]).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young ([email protected])"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson ([email protected])"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. /* ====================================================================
  59. * Copyright (c) 1998-2000 The OpenSSL Project. All rights reserved.
  60. *
  61. * Redistribution and use in source and binary forms, with or without
  62. * modification, are permitted provided that the following conditions
  63. * are met:
  64. *
  65. * 1. Redistributions of source code must retain the above copyright
  66. * notice, this list of conditions and the following disclaimer.
  67. *
  68. * 2. Redistributions in binary form must reproduce the above copyright
  69. * notice, this list of conditions and the following disclaimer in
  70. * the documentation and/or other materials provided with the
  71. * distribution.
  72. *
  73. * 3. All advertising materials mentioning features or use of this
  74. * software must display the following acknowledgment:
  75. * "This product includes software developed by the OpenSSL Project
  76. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77. *
  78. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79. * endorse or promote products derived from this software without
  80. * prior written permission. For written permission, please contact
  81. * [email protected].
  82. *
  83. * 5. Products derived from this software may not be called "OpenSSL"
  84. * nor may "OpenSSL" appear in their names without prior written
  85. * permission of the OpenSSL Project.
  86. *
  87. * 6. Redistributions of any form whatsoever must retain the following
  88. * acknowledgment:
  89. * "This product includes software developed by the OpenSSL Project
  90. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91. *
  92. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  100. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  101. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  102. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  103. * OF THE POSSIBILITY OF SUCH DAMAGE.
  104. * ====================================================================
  105. *
  106. * This product includes cryptographic software written by Eric Young
  107. * ([email protected]). This product includes software written by Tim
  108. * Hudson ([email protected]).
  109. *
  110. */
  111. #include "cryptlib.h"
  112. #include <openssl/rand.h>
  113. #include "rand_lcl.h"
  114. #if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_WIN32)
  115. # include <windows.h>
  116. # ifndef _WIN32_WINNT
  117. # define _WIN32_WINNT 0x0400
  118. # endif
  119. #ifndef WINRT_ENABLED // -- GODOT --
  120. # include <wincrypt.h>
  121. # include <tlhelp32.h>
  122. #endif // -- GODOT --
  123. /*
  124. * Limit the time spent walking through the heap, processes, threads and
  125. * modules to a maximum of 1000 miliseconds each, unless CryptoGenRandom
  126. * failed
  127. */
  128. # define MAXDELAY 1000
  129. /*
  130. * Intel hardware RNG CSP -- available from
  131. * http://developer.intel.com/design/security/rng/redist_license.htm
  132. */
  133. # define PROV_INTEL_SEC 22
  134. # define INTEL_DEF_PROV L"Intel Hardware Cryptographic Service Provider"
  135. static void readtimer(void);
  136. static void readscreen(void);
  137. /*
  138. * It appears like CURSORINFO, PCURSORINFO and LPCURSORINFO are only defined
  139. * when WINVER is 0x0500 and up, which currently only happens on Win2000.
  140. * Unfortunately, those are typedefs, so they're a little bit difficult to
  141. * detect properly. On the other hand, the macro CURSOR_SHOWING is defined
  142. * within the same conditional, so it can be use to detect the absence of
  143. * said typedefs.
  144. */
  145. # ifndef CURSOR_SHOWING
  146. /*
  147. * Information about the global cursor.
  148. */
  149. typedef struct tagCURSORINFO {
  150. DWORD cbSize;
  151. DWORD flags;
  152. HCURSOR hCursor;
  153. POINT ptScreenPos;
  154. } CURSORINFO, *PCURSORINFO, *LPCURSORINFO;
  155. # define CURSOR_SHOWING 0x00000001
  156. # endif /* CURSOR_SHOWING */
  157. # if !defined(OPENSSL_SYS_WINCE) && !defined(WINRT_ENABLED) // -- GODOT --
  158. typedef BOOL(WINAPI *CRYPTACQUIRECONTEXTW) (HCRYPTPROV *, LPCWSTR, LPCWSTR,
  159. DWORD, DWORD);
  160. typedef BOOL(WINAPI *CRYPTGENRANDOM) (HCRYPTPROV, DWORD, BYTE *);
  161. typedef BOOL(WINAPI *CRYPTRELEASECONTEXT) (HCRYPTPROV, DWORD);
  162. typedef HWND(WINAPI *GETFOREGROUNDWINDOW) (VOID);
  163. typedef BOOL(WINAPI *GETCURSORINFO) (PCURSORINFO);
  164. typedef DWORD(WINAPI *GETQUEUESTATUS) (UINT);
  165. typedef HANDLE(WINAPI *CREATETOOLHELP32SNAPSHOT) (DWORD, DWORD);
  166. typedef BOOL(WINAPI *CLOSETOOLHELP32SNAPSHOT) (HANDLE);
  167. typedef BOOL(WINAPI *HEAP32FIRST) (LPHEAPENTRY32, DWORD, size_t);
  168. typedef BOOL(WINAPI *HEAP32NEXT) (LPHEAPENTRY32);
  169. typedef BOOL(WINAPI *HEAP32LIST) (HANDLE, LPHEAPLIST32);
  170. typedef BOOL(WINAPI *PROCESS32) (HANDLE, LPPROCESSENTRY32);
  171. typedef BOOL(WINAPI *THREAD32) (HANDLE, LPTHREADENTRY32);
  172. typedef BOOL(WINAPI *MODULE32) (HANDLE, LPMODULEENTRY32);
  173. # include <lmcons.h>
  174. # include <lmstats.h>
  175. # if 1
  176. /*
  177. * The NET API is Unicode only. It requires the use of the UNICODE macro.
  178. * When UNICODE is defined LPTSTR becomes LPWSTR. LMSTR was was added to the
  179. * Platform SDK to allow the NET API to be used in non-Unicode applications
  180. * provided that Unicode strings were still used for input. LMSTR is defined
  181. * as LPWSTR.
  182. */
  183. typedef NET_API_STATUS(NET_API_FUNCTION *NETSTATGET)
  184. (LPWSTR, LPWSTR, DWORD, DWORD, LPBYTE *);
  185. typedef NET_API_STATUS(NET_API_FUNCTION *NETFREE) (LPBYTE);
  186. # endif /* 1 */
  187. # endif /* !OPENSSL_SYS_WINCE */
  188. #define NOTTOOLONG(start) ((GetTickCount() - (start)) < MAXDELAY)
  189. #if !defined(WINRT_ENABLED) // -- GODOT --
  190. int RAND_poll(void)
  191. {
  192. MEMORYSTATUS m;
  193. HCRYPTPROV hProvider = 0;
  194. DWORD w;
  195. int good = 0;
  196. # if defined(OPENSSL_SYS_WINCE)
  197. # if defined(_WIN32_WCE) && _WIN32_WCE>=300
  198. /*
  199. * Even though MSDN says _WIN32_WCE>=210, it doesn't seem to be available
  200. * in commonly available implementations prior 300...
  201. */
  202. {
  203. BYTE buf[64];
  204. /* poll the CryptoAPI PRNG */
  205. /* The CryptoAPI returns sizeof(buf) bytes of randomness */
  206. if (CryptAcquireContextW(&hProvider, NULL, NULL, PROV_RSA_FULL,
  207. CRYPT_VERIFYCONTEXT)) {
  208. if (CryptGenRandom(hProvider, sizeof(buf), buf))
  209. RAND_add(buf, sizeof(buf), sizeof(buf));
  210. CryptReleaseContext(hProvider, 0);
  211. }
  212. }
  213. # endif
  214. # else /* OPENSSL_SYS_WINCE */
  215. /*
  216. * None of below libraries are present on Windows CE, which is
  217. * why we #ifndef the whole section. This also excuses us from
  218. * handling the GetProcAddress issue. The trouble is that in
  219. * real Win32 API GetProcAddress is available in ANSI flavor
  220. * only. In WinCE on the other hand GetProcAddress is a macro
  221. * most commonly defined as GetProcAddressW, which accepts
  222. * Unicode argument. If we were to call GetProcAddress under
  223. * WinCE, I'd recommend to either redefine GetProcAddress as
  224. * GetProcAddressA (there seem to be one in common CE spec) or
  225. * implement own shim routine, which would accept ANSI argument
  226. * and expand it to Unicode.
  227. */
  228. {
  229. /* load functions dynamically - not available on all systems */
  230. HMODULE advapi = LoadLibrary(TEXT("ADVAPI32.DLL"));
  231. HMODULE kernel = LoadLibrary(TEXT("KERNEL32.DLL"));
  232. HMODULE user = NULL;
  233. HMODULE netapi = LoadLibrary(TEXT("NETAPI32.DLL"));
  234. CRYPTACQUIRECONTEXTW acquire = NULL;
  235. CRYPTGENRANDOM gen = NULL;
  236. CRYPTRELEASECONTEXT release = NULL;
  237. NETSTATGET netstatget = NULL;
  238. NETFREE netfree = NULL;
  239. BYTE buf[64];
  240. if (netapi) {
  241. netstatget =
  242. (NETSTATGET) GetProcAddress(netapi, "NetStatisticsGet");
  243. netfree = (NETFREE) GetProcAddress(netapi, "NetApiBufferFree");
  244. }
  245. if (netstatget && netfree) {
  246. LPBYTE outbuf;
  247. /*
  248. * NetStatisticsGet() is a Unicode only function
  249. * STAT_WORKSTATION_0 contains 45 fields and STAT_SERVER_0
  250. * contains 17 fields. We treat each field as a source of one
  251. * byte of entropy.
  252. */
  253. if (netstatget(NULL, L"LanmanWorkstation", 0, 0, &outbuf) == 0) {
  254. RAND_add(outbuf, sizeof(STAT_WORKSTATION_0), 45);
  255. netfree(outbuf);
  256. }
  257. if (netstatget(NULL, L"LanmanServer", 0, 0, &outbuf) == 0) {
  258. RAND_add(outbuf, sizeof(STAT_SERVER_0), 17);
  259. netfree(outbuf);
  260. }
  261. }
  262. if (netapi)
  263. FreeLibrary(netapi);
  264. /*
  265. * It appears like this can cause an exception deep within
  266. * ADVAPI32.DLL at random times on Windows 2000. Reported by Jeffrey
  267. * Altman. Only use it on NT.
  268. */
  269. if (advapi) {
  270. /*
  271. * If it's available, then it's available in both ANSI
  272. * and UNICODE flavors even in Win9x, documentation says.
  273. * We favor Unicode...
  274. */
  275. acquire = (CRYPTACQUIRECONTEXTW) GetProcAddress(advapi,
  276. "CryptAcquireContextW");
  277. gen = (CRYPTGENRANDOM) GetProcAddress(advapi, "CryptGenRandom");
  278. release = (CRYPTRELEASECONTEXT) GetProcAddress(advapi,
  279. "CryptReleaseContext");
  280. }
  281. if (acquire && gen && release) {
  282. /* poll the CryptoAPI PRNG */
  283. /* The CryptoAPI returns sizeof(buf) bytes of randomness */
  284. if (acquire(&hProvider, NULL, NULL, PROV_RSA_FULL,
  285. CRYPT_VERIFYCONTEXT)) {
  286. if (gen(hProvider, sizeof(buf), buf) != 0) {
  287. RAND_add(buf, sizeof(buf), 0);
  288. good = 1;
  289. # if 0
  290. printf("randomness from PROV_RSA_FULL\n");
  291. # endif
  292. }
  293. release(hProvider, 0);
  294. }
  295. /* poll the Pentium PRG with CryptoAPI */
  296. if (acquire(&hProvider, 0, INTEL_DEF_PROV, PROV_INTEL_SEC, 0)) {
  297. if (gen(hProvider, sizeof(buf), buf) != 0) {
  298. RAND_add(buf, sizeof(buf), sizeof(buf));
  299. good = 1;
  300. # if 0
  301. printf("randomness from PROV_INTEL_SEC\n");
  302. # endif
  303. }
  304. release(hProvider, 0);
  305. }
  306. }
  307. if (advapi)
  308. FreeLibrary(advapi);
  309. if ((!check_winnt() ||
  310. !OPENSSL_isservice()) &&
  311. (user = LoadLibrary(TEXT("USER32.DLL")))) {
  312. GETCURSORINFO cursor;
  313. GETFOREGROUNDWINDOW win;
  314. GETQUEUESTATUS queue;
  315. win =
  316. (GETFOREGROUNDWINDOW) GetProcAddress(user,
  317. "GetForegroundWindow");
  318. cursor = (GETCURSORINFO) GetProcAddress(user, "GetCursorInfo");
  319. queue = (GETQUEUESTATUS) GetProcAddress(user, "GetQueueStatus");
  320. if (win) {
  321. /* window handle */
  322. HWND h = win();
  323. RAND_add(&h, sizeof(h), 0);
  324. }
  325. if (cursor) {
  326. /*
  327. * unfortunately, its not safe to call GetCursorInfo() on NT4
  328. * even though it exists in SP3 (or SP6) and higher.
  329. */
  330. if (check_winnt() && !check_win_minplat(5))
  331. cursor = 0;
  332. }
  333. if (cursor) {
  334. /* cursor position */
  335. /* assume 2 bytes of entropy */
  336. CURSORINFO ci;
  337. ci.cbSize = sizeof(CURSORINFO);
  338. if (cursor(&ci))
  339. RAND_add(&ci, ci.cbSize, 2);
  340. }
  341. if (queue) {
  342. /* message queue status */
  343. /* assume 1 byte of entropy */
  344. w = queue(QS_ALLEVENTS);
  345. RAND_add(&w, sizeof(w), 1);
  346. }
  347. FreeLibrary(user);
  348. }
  349. /*-
  350. * Toolhelp32 snapshot: enumerate processes, threads, modules and heap
  351. * http://msdn.microsoft.com/library/psdk/winbase/toolhelp_5pfd.htm
  352. * (Win 9x and 2000 only, not available on NT)
  353. *
  354. * This seeding method was proposed in Peter Gutmann, Software
  355. * Generation of Practically Strong Random Numbers,
  356. * http://www.usenix.org/publications/library/proceedings/sec98/gutmann.html
  357. * revised version at http://www.cryptoengines.com/~peter/06_random.pdf
  358. * (The assignment of entropy estimates below is arbitrary, but based
  359. * on Peter's analysis the full poll appears to be safe. Additional
  360. * interactive seeding is encouraged.)
  361. */
  362. if (kernel) {
  363. CREATETOOLHELP32SNAPSHOT snap;
  364. CLOSETOOLHELP32SNAPSHOT close_snap;
  365. HANDLE handle;
  366. HEAP32FIRST heap_first;
  367. HEAP32NEXT heap_next;
  368. HEAP32LIST heaplist_first, heaplist_next;
  369. PROCESS32 process_first, process_next;
  370. THREAD32 thread_first, thread_next;
  371. MODULE32 module_first, module_next;
  372. HEAPLIST32 hlist;
  373. HEAPENTRY32 hentry;
  374. PROCESSENTRY32 p;
  375. THREADENTRY32 t;
  376. MODULEENTRY32 m;
  377. DWORD starttime = 0;
  378. snap = (CREATETOOLHELP32SNAPSHOT)
  379. GetProcAddress(kernel, "CreateToolhelp32Snapshot");
  380. close_snap = (CLOSETOOLHELP32SNAPSHOT)
  381. GetProcAddress(kernel, "CloseToolhelp32Snapshot");
  382. heap_first = (HEAP32FIRST) GetProcAddress(kernel, "Heap32First");
  383. heap_next = (HEAP32NEXT) GetProcAddress(kernel, "Heap32Next");
  384. heaplist_first =
  385. (HEAP32LIST) GetProcAddress(kernel, "Heap32ListFirst");
  386. heaplist_next =
  387. (HEAP32LIST) GetProcAddress(kernel, "Heap32ListNext");
  388. process_first =
  389. (PROCESS32) GetProcAddress(kernel, "Process32First");
  390. process_next =
  391. (PROCESS32) GetProcAddress(kernel, "Process32Next");
  392. thread_first = (THREAD32) GetProcAddress(kernel, "Thread32First");
  393. thread_next = (THREAD32) GetProcAddress(kernel, "Thread32Next");
  394. module_first = (MODULE32) GetProcAddress(kernel, "Module32First");
  395. module_next = (MODULE32) GetProcAddress(kernel, "Module32Next");
  396. if (snap && heap_first && heap_next && heaplist_first &&
  397. heaplist_next && process_first && process_next &&
  398. thread_first && thread_next && module_first &&
  399. module_next && (handle = snap(TH32CS_SNAPALL, 0))
  400. != INVALID_HANDLE_VALUE) {
  401. /* heap list and heap walking */
  402. /*
  403. * HEAPLIST32 contains 3 fields that will change with each
  404. * entry. Consider each field a source of 1 byte of entropy.
  405. * HEAPENTRY32 contains 5 fields that will change with each
  406. * entry. Consider each field a source of 1 byte of entropy.
  407. */
  408. ZeroMemory(&hlist, sizeof(HEAPLIST32));
  409. hlist.dwSize = sizeof(HEAPLIST32);
  410. if (good)
  411. starttime = GetTickCount();
  412. # ifdef _MSC_VER
  413. if (heaplist_first(handle, &hlist)) {
  414. /*
  415. * following discussion on dev ML, exception on WinCE (or
  416. * other Win platform) is theoretically of unknown
  417. * origin; prevent infinite loop here when this
  418. * theoretical case occurs; otherwise cope with the
  419. * expected (MSDN documented) exception-throwing
  420. * behaviour of Heap32Next() on WinCE.
  421. *
  422. * based on patch in original message by Tanguy Fautré
  423. * (2009/03/02) Subject: RAND_poll() and
  424. * CreateToolhelp32Snapshot() stability
  425. */
  426. int ex_cnt_limit = 42;
  427. do {
  428. RAND_add(&hlist, hlist.dwSize, 3);
  429. __try {
  430. ZeroMemory(&hentry, sizeof(HEAPENTRY32));
  431. hentry.dwSize = sizeof(HEAPENTRY32);
  432. if (heap_first(&hentry,
  433. hlist.th32ProcessID,
  434. hlist.th32HeapID)) {
  435. int entrycnt = 80;
  436. do
  437. RAND_add(&hentry, hentry.dwSize, 5);
  438. while (heap_next(&hentry)
  439. && (!good || NOTTOOLONG(starttime))
  440. && --entrycnt > 0);
  441. }
  442. }
  443. __except(EXCEPTION_EXECUTE_HANDLER) {
  444. /*
  445. * ignore access violations when walking the heap
  446. * list
  447. */
  448. ex_cnt_limit--;
  449. }
  450. } while (heaplist_next(handle, &hlist)
  451. && (!good || NOTTOOLONG(starttime))
  452. && ex_cnt_limit > 0);
  453. }
  454. # else
  455. if (heaplist_first(handle, &hlist)) {
  456. do {
  457. RAND_add(&hlist, hlist.dwSize, 3);
  458. hentry.dwSize = sizeof(HEAPENTRY32);
  459. if (heap_first(&hentry,
  460. hlist.th32ProcessID,
  461. hlist.th32HeapID)) {
  462. int entrycnt = 80;
  463. do
  464. RAND_add(&hentry, hentry.dwSize, 5);
  465. while (heap_next(&hentry)
  466. && (!good || NOTTOOLONG(starttime))
  467. && --entrycnt > 0);
  468. }
  469. } while (heaplist_next(handle, &hlist)
  470. && (!good || NOTTOOLONG(starttime)));
  471. }
  472. # endif
  473. /* process walking */
  474. /*
  475. * PROCESSENTRY32 contains 9 fields that will change with
  476. * each entry. Consider each field a source of 1 byte of
  477. * entropy.
  478. */
  479. p.dwSize = sizeof(PROCESSENTRY32);
  480. if (good)
  481. starttime = GetTickCount();
  482. if (process_first(handle, &p))
  483. do
  484. RAND_add(&p, p.dwSize, 9);
  485. while (process_next(handle, &p)
  486. && (!good || NOTTOOLONG(starttime)));
  487. /* thread walking */
  488. /*
  489. * THREADENTRY32 contains 6 fields that will change with each
  490. * entry. Consider each field a source of 1 byte of entropy.
  491. */
  492. t.dwSize = sizeof(THREADENTRY32);
  493. if (good)
  494. starttime = GetTickCount();
  495. if (thread_first(handle, &t))
  496. do
  497. RAND_add(&t, t.dwSize, 6);
  498. while (thread_next(handle, &t)
  499. && (!good || NOTTOOLONG(starttime)));
  500. /* module walking */
  501. /*
  502. * MODULEENTRY32 contains 9 fields that will change with each
  503. * entry. Consider each field a source of 1 byte of entropy.
  504. */
  505. m.dwSize = sizeof(MODULEENTRY32);
  506. if (good)
  507. starttime = GetTickCount();
  508. if (module_first(handle, &m))
  509. do
  510. RAND_add(&m, m.dwSize, 9);
  511. while (module_next(handle, &m)
  512. && (!good || NOTTOOLONG(starttime)));
  513. if (close_snap)
  514. close_snap(handle);
  515. else
  516. CloseHandle(handle);
  517. }
  518. FreeLibrary(kernel);
  519. }
  520. }
  521. # endif /* !OPENSSL_SYS_WINCE */
  522. /* timer data */
  523. readtimer();
  524. /* memory usage statistics */
  525. GlobalMemoryStatus(&m);
  526. RAND_add(&m, sizeof(m), 1);
  527. /* process ID */
  528. w = GetCurrentProcessId();
  529. RAND_add(&w, sizeof(w), 1);
  530. # if 0
  531. printf("Exiting RAND_poll\n");
  532. # endif
  533. return (1);
  534. }
  535. #endif // WINRT_ENABLED // -- GODOT --
  536. int RAND_event(UINT iMsg, WPARAM wParam, LPARAM lParam)
  537. {
  538. double add_entropy = 0;
  539. switch (iMsg) {
  540. case WM_KEYDOWN:
  541. {
  542. static WPARAM key;
  543. if (key != wParam)
  544. add_entropy = 0.05;
  545. key = wParam;
  546. }
  547. break;
  548. case WM_MOUSEMOVE:
  549. {
  550. static int lastx, lasty, lastdx, lastdy;
  551. int x, y, dx, dy;
  552. x = LOWORD(lParam);
  553. y = HIWORD(lParam);
  554. dx = lastx - x;
  555. dy = lasty - y;
  556. if (dx != 0 && dy != 0 && dx - lastdx != 0 && dy - lastdy != 0)
  557. add_entropy = .2;
  558. lastx = x, lasty = y;
  559. lastdx = dx, lastdy = dy;
  560. }
  561. break;
  562. }
  563. readtimer();
  564. RAND_add(&iMsg, sizeof(iMsg), add_entropy);
  565. RAND_add(&wParam, sizeof(wParam), 0);
  566. RAND_add(&lParam, sizeof(lParam), 0);
  567. return (RAND_status());
  568. }
  569. void RAND_screen(void)
  570. { /* function available for backward
  571. * compatibility */
  572. RAND_poll();
  573. readscreen();
  574. }
  575. /* feed timing information to the PRNG */
  576. static void readtimer(void)
  577. {
  578. DWORD w;
  579. LARGE_INTEGER l;
  580. static int have_perfc = 1;
  581. # if defined(_MSC_VER) && defined(_M_X86)
  582. static int have_tsc = 1;
  583. DWORD cyclecount;
  584. if (have_tsc) {
  585. __try {
  586. __asm {
  587. _emit 0x0f _emit 0x31 mov cyclecount, eax}
  588. RAND_add(&cyclecount, sizeof(cyclecount), 1);
  589. }
  590. __except(EXCEPTION_EXECUTE_HANDLER) {
  591. have_tsc = 0;
  592. }
  593. }
  594. # else
  595. # define have_tsc 0
  596. # endif
  597. if (have_perfc) {
  598. if (QueryPerformanceCounter(&l) == 0)
  599. have_perfc = 0;
  600. else
  601. RAND_add(&l, sizeof(l), 0);
  602. }
  603. if (!have_tsc && !have_perfc) {
  604. w = GetTickCount();
  605. RAND_add(&w, sizeof(w), 0);
  606. }
  607. }
  608. /* feed screen contents to PRNG */
  609. /*****************************************************************************
  610. *
  611. * Created 960901 by Gertjan van Oosten, [email protected], West Consulting B.V.
  612. *
  613. * Code adapted from
  614. * <URL:http://support.microsoft.com/default.aspx?scid=kb;[LN];97193>;
  615. * the original copyright message is:
  616. *
  617. * (C) Copyright Microsoft Corp. 1993. All rights reserved.
  618. *
  619. * You have a royalty-free right to use, modify, reproduce and
  620. * distribute the Sample Files (and/or any modified version) in
  621. * any way you find useful, provided that you agree that
  622. * Microsoft has no warranty obligations or liability for any
  623. * Sample Application Files which are modified.
  624. */
  625. static void readscreen(void)
  626. {
  627. # if !defined(OPENSSL_SYS_WINCE) && !defined(OPENSSL_SYS_WIN32_CYGWIN) && !defined(WINRT_ENABLED) // -- GODOT --
  628. HDC hScrDC; /* screen DC */
  629. HBITMAP hBitmap; /* handle for our bitmap */
  630. BITMAP bm; /* bitmap properties */
  631. unsigned int size; /* size of bitmap */
  632. char *bmbits; /* contents of bitmap */
  633. int w; /* screen width */
  634. int h; /* screen height */
  635. int y; /* y-coordinate of screen lines to grab */
  636. int n = 16; /* number of screen lines to grab at a time */
  637. BITMAPINFOHEADER bi; /* info about the bitmap */
  638. if (check_winnt() && OPENSSL_isservice() > 0)
  639. return;
  640. /* Get a reference to the screen DC */
  641. hScrDC = GetDC(NULL);
  642. /* Get screen resolution */
  643. w = GetDeviceCaps(hScrDC, HORZRES);
  644. h = GetDeviceCaps(hScrDC, VERTRES);
  645. /* Create a bitmap compatible with the screen DC */
  646. hBitmap = CreateCompatibleBitmap(hScrDC, w, n);
  647. /* Get bitmap properties */
  648. GetObject(hBitmap, sizeof(bm), (LPSTR)&bm);
  649. size = (unsigned int)4 * bm.bmHeight * bm.bmWidth;
  650. bi.biSize = sizeof(bi);
  651. bi.biWidth = bm.bmWidth;
  652. bi.biHeight = bm.bmHeight;
  653. bi.biPlanes = 1;
  654. bi.biBitCount = 32;
  655. bi.biCompression = BI_RGB;
  656. bi.biSizeImage = 0;
  657. bi.biXPelsPerMeter = 0;
  658. bi.biYPelsPerMeter = 0;
  659. bi.biClrUsed = 0;
  660. bi.biClrImportant = 0;
  661. bmbits = OPENSSL_malloc(size);
  662. if (bmbits) {
  663. /* Now go through the whole screen, repeatedly grabbing n lines */
  664. for (y = 0; y < h - n; y += n) {
  665. unsigned char md[MD_DIGEST_LENGTH];
  666. /* Copy the bits of the current line range into the buffer */
  667. GetDIBits(hScrDC, hBitmap, y, n,
  668. bmbits, (LPBITMAPINFO)&bi, DIB_RGB_COLORS);
  669. /* Get the hash of the bitmap */
  670. MD(bmbits, size, md);
  671. /* Seed the random generator with the hash value */
  672. RAND_add(md, MD_DIGEST_LENGTH, 0);
  673. }
  674. OPENSSL_free(bmbits);
  675. }
  676. /* Clean up */
  677. DeleteObject(hBitmap);
  678. ReleaseDC(NULL, hScrDC);
  679. # endif /* !OPENSSL_SYS_WINCE */
  680. }
  681. #endif