[205] | 1 | /*
|
---|
| 2 | ** 2001 September 15
|
---|
| 3 | **
|
---|
| 4 | ** The author disclaims copyright to this source code. In place of
|
---|
| 5 | ** a legal notice, here is a blessing:
|
---|
| 6 | **
|
---|
| 7 | ** May you do good and not evil.
|
---|
| 8 | ** May you find forgiveness for yourself and forgive others.
|
---|
| 9 | ** May you share freely, never taking more than you give.
|
---|
| 10 | **
|
---|
| 11 | *************************************************************************
|
---|
| 12 | ** This file contains code to implement a pseudo-random number
|
---|
| 13 | ** generator (PRNG) for SQLite.
|
---|
| 14 | **
|
---|
| 15 | ** Random numbers are used by some of the database backends in order
|
---|
| 16 | ** to generate random integer keys for tables or random filenames.
|
---|
| 17 | **
|
---|
| 18 | ** $Id: random.c,v 1.11 2004/02/11 09:46:33 drh Exp $
|
---|
| 19 | */
|
---|
| 20 | #include "sqliteInt.h"
|
---|
| 21 | #include "os.h"
|
---|
| 22 |
|
---|
| 23 |
|
---|
| 24 | /*
|
---|
| 25 | ** Get a single 8-bit random value from the RC4 PRNG. The Mutex
|
---|
| 26 | ** must be held while executing this routine.
|
---|
| 27 | **
|
---|
| 28 | ** Why not just use a library random generator like lrand48() for this?
|
---|
| 29 | ** Because the OP_NewRecno opcode in the VDBE depends on having a very
|
---|
| 30 | ** good source of random numbers. The lrand48() library function may
|
---|
| 31 | ** well be good enough. But maybe not. Or maybe lrand48() has some
|
---|
| 32 | ** subtle problems on some systems that could cause problems. It is hard
|
---|
| 33 | ** to know. To minimize the risk of problems due to bad lrand48()
|
---|
| 34 | ** implementations, SQLite uses this random number generator based
|
---|
| 35 | ** on RC4, which we know works very well.
|
---|
| 36 | */
|
---|
| 37 | static int randomByte(){
|
---|
| 38 | unsigned char t;
|
---|
| 39 |
|
---|
| 40 | /* All threads share a single random number generator.
|
---|
| 41 | ** This structure is the current state of the generator.
|
---|
| 42 | */
|
---|
| 43 | static struct {
|
---|
| 44 | unsigned char isInit; /* True if initialized */
|
---|
| 45 | unsigned char i, j; /* State variables */
|
---|
| 46 | unsigned char s[256]; /* State variables */
|
---|
| 47 | } prng;
|
---|
| 48 |
|
---|
| 49 | /* Initialize the state of the random number generator once,
|
---|
| 50 | ** the first time this routine is called. The seed value does
|
---|
| 51 | ** not need to contain a lot of randomness since we are not
|
---|
| 52 | ** trying to do secure encryption or anything like that...
|
---|
| 53 | **
|
---|
| 54 | ** Nothing in this file or anywhere else in SQLite does any kind of
|
---|
| 55 | ** encryption. The RC4 algorithm is being used as a PRNG (pseudo-random
|
---|
| 56 | ** number generator) not as an encryption device.
|
---|
| 57 | */
|
---|
| 58 | if( !prng.isInit ){
|
---|
| 59 | int i;
|
---|
| 60 | char k[256];
|
---|
| 61 | prng.j = 0;
|
---|
| 62 | prng.i = 0;
|
---|
| 63 | sqliteOsRandomSeed(k);
|
---|
| 64 | for(i=0; i<256; i++){
|
---|
| 65 | prng.s[i] = i;
|
---|
| 66 | }
|
---|
| 67 | for(i=0; i<256; i++){
|
---|
| 68 | prng.j += prng.s[i] + k[i];
|
---|
| 69 | t = prng.s[prng.j];
|
---|
| 70 | prng.s[prng.j] = prng.s[i];
|
---|
| 71 | prng.s[i] = t;
|
---|
| 72 | }
|
---|
| 73 | prng.isInit = 1;
|
---|
| 74 | }
|
---|
| 75 |
|
---|
| 76 | /* Generate and return single random byte
|
---|
| 77 | */
|
---|
| 78 | prng.i++;
|
---|
| 79 | t = prng.s[prng.i];
|
---|
| 80 | prng.j += t;
|
---|
| 81 | prng.s[prng.i] = prng.s[prng.j];
|
---|
| 82 | prng.s[prng.j] = t;
|
---|
| 83 | t += prng.s[prng.i];
|
---|
| 84 | return prng.s[t];
|
---|
| 85 | }
|
---|
| 86 |
|
---|
| 87 | /*
|
---|
| 88 | ** Return N random bytes.
|
---|
| 89 | */
|
---|
| 90 | void sqliteRandomness(int N, void *pBuf){
|
---|
| 91 | unsigned char *zBuf = pBuf;
|
---|
| 92 | sqliteOsEnterMutex();
|
---|
| 93 | while( N-- ){
|
---|
| 94 | *(zBuf++) = randomByte();
|
---|
| 95 | }
|
---|
| 96 | sqliteOsLeaveMutex();
|
---|
| 97 | }
|
---|