HMAC_DRBG (NIST SP 800-90A). More...
#include "config.h"
#include "md.h"
Go to the source code of this file.
Data Structures | |
struct | mbedtls_hmac_drbg_context |
Defines | |
#define | MBEDTLS_ERR_HMAC_DRBG_REQUEST_TOO_BIG -0x0003 |
#define | MBEDTLS_ERR_HMAC_DRBG_INPUT_TOO_BIG -0x0005 |
#define | MBEDTLS_ERR_HMAC_DRBG_FILE_IO_ERROR -0x0007 |
#define | MBEDTLS_ERR_HMAC_DRBG_ENTROPY_SOURCE_FAILED -0x0009 |
#define | MBEDTLS_HMAC_DRBG_PR_OFF 0 |
#define | MBEDTLS_HMAC_DRBG_PR_ON 1 |
SECTION: Module settings | |
The configuration options you can set for this module are in this section. Either change them in config.h or define them on the compiler command line. | |
#define | MBEDTLS_HMAC_DRBG_RESEED_INTERVAL 10000 |
#define | MBEDTLS_HMAC_DRBG_MAX_INPUT 256 |
#define | MBEDTLS_HMAC_DRBG_MAX_REQUEST 1024 |
#define | MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT 384 |
Functions | |
void | mbedtls_hmac_drbg_init (mbedtls_hmac_drbg_context *ctx) |
HMAC_DRBG context initialization Makes the context ready for mbedtls_hmac_drbg_seed(), mbedtls_hmac_drbg_seed_buf() or mbedtls_hmac_drbg_free(). | |
int | mbedtls_hmac_drbg_seed (mbedtls_hmac_drbg_context *ctx, const mbedtls_md_info_t *md_info, int(*f_entropy)(void *, unsigned char *, size_t), void *p_entropy, const unsigned char *custom, size_t len) |
HMAC_DRBG initial seeding Seed and setup entropy source for future reseeds. | |
int | mbedtls_hmac_drbg_seed_buf (mbedtls_hmac_drbg_context *ctx, const mbedtls_md_info_t *md_info, const unsigned char *data, size_t data_len) |
Initilisation of simpified HMAC_DRBG (never reseeds). (For use with deterministic ECDSA.). | |
void | mbedtls_hmac_drbg_set_prediction_resistance (mbedtls_hmac_drbg_context *ctx, int resistance) |
Enable / disable prediction resistance (Default: Off). | |
void | mbedtls_hmac_drbg_set_entropy_len (mbedtls_hmac_drbg_context *ctx, size_t len) |
Set the amount of entropy grabbed on each reseed (Default: given by the security strength, which depends on the hash used, see mbedtls_hmac_drbg_init() ). | |
void | mbedtls_hmac_drbg_set_reseed_interval (mbedtls_hmac_drbg_context *ctx, int interval) |
Set the reseed interval (Default: MBEDTLS_HMAC_DRBG_RESEED_INTERVAL). | |
int | mbedtls_hmac_drbg_update_ret (mbedtls_hmac_drbg_context *ctx, const unsigned char *additional, size_t add_len) |
HMAC_DRBG update state. | |
void | mbedtls_hmac_drbg_update (mbedtls_hmac_drbg_context *ctx, const unsigned char *additional, size_t add_len) |
HMAC_DRBG update state. | |
int | mbedtls_hmac_drbg_reseed (mbedtls_hmac_drbg_context *ctx, const unsigned char *additional, size_t len) |
HMAC_DRBG reseeding (extracts data from entropy source). | |
int | mbedtls_hmac_drbg_random_with_add (void *p_rng, unsigned char *output, size_t output_len, const unsigned char *additional, size_t add_len) |
HMAC_DRBG generate random with additional update input. | |
int | mbedtls_hmac_drbg_random (void *p_rng, unsigned char *output, size_t out_len) |
HMAC_DRBG generate random. | |
void | mbedtls_hmac_drbg_free (mbedtls_hmac_drbg_context *ctx) |
Free an HMAC_DRBG context. | |
int | mbedtls_hmac_drbg_write_seed_file (mbedtls_hmac_drbg_context *ctx, const char *path) |
Write a seed file. | |
int | mbedtls_hmac_drbg_update_seed_file (mbedtls_hmac_drbg_context *ctx, const char *path) |
Read and update a seed file. Seed is added to this instance. | |
int | mbedtls_hmac_drbg_self_test (int verbose) |
Checkup routine. |
HMAC_DRBG (NIST SP 800-90A).
Definition in file hmac_drbg.h.
#define MBEDTLS_ERR_HMAC_DRBG_ENTROPY_SOURCE_FAILED -0x0009 |
The entropy source failed.
Definition at line 45 of file hmac_drbg.h.
#define MBEDTLS_ERR_HMAC_DRBG_FILE_IO_ERROR -0x0007 |
Read/write error in file.
Definition at line 44 of file hmac_drbg.h.
#define MBEDTLS_ERR_HMAC_DRBG_INPUT_TOO_BIG -0x0005 |
Input too large (Entropy + additional).
Definition at line 43 of file hmac_drbg.h.
#define MBEDTLS_ERR_HMAC_DRBG_REQUEST_TOO_BIG -0x0003 |
Too many random requested in single call.
Definition at line 42 of file hmac_drbg.h.
#define MBEDTLS_HMAC_DRBG_MAX_INPUT 256 |
Maximum number of additional input bytes
Definition at line 60 of file hmac_drbg.h.
#define MBEDTLS_HMAC_DRBG_MAX_REQUEST 1024 |
Maximum number of requested bytes per call
Definition at line 64 of file hmac_drbg.h.
#define MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT 384 |
Maximum size of (re)seed buffer
Definition at line 68 of file hmac_drbg.h.
#define MBEDTLS_HMAC_DRBG_PR_OFF 0 |
No prediction resistance
Definition at line 73 of file hmac_drbg.h.
#define MBEDTLS_HMAC_DRBG_PR_ON 1 |
Prediction resistance enabled
Definition at line 74 of file hmac_drbg.h.
#define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL 10000 |
Interval before reseed is performed by default
Definition at line 56 of file hmac_drbg.h.
void mbedtls_hmac_drbg_free | ( | mbedtls_hmac_drbg_context * | ctx | ) |
Free an HMAC_DRBG context.
ctx | HMAC_DRBG context to free. |
void mbedtls_hmac_drbg_init | ( | mbedtls_hmac_drbg_context * | ctx | ) |
HMAC_DRBG context initialization Makes the context ready for mbedtls_hmac_drbg_seed(), mbedtls_hmac_drbg_seed_buf() or mbedtls_hmac_drbg_free().
ctx | HMAC_DRBG context to be initialized |
int mbedtls_hmac_drbg_random | ( | void * | p_rng, | |
unsigned char * | output, | |||
size_t | out_len | |||
) |
HMAC_DRBG generate random.
Note: Automatically reseeds if reseed_counter is reached or PR is enabled.
p_rng | HMAC_DRBG context | |
output | Buffer to fill | |
out_len | Length of the buffer |
int mbedtls_hmac_drbg_random_with_add | ( | void * | p_rng, | |
unsigned char * | output, | |||
size_t | output_len, | |||
const unsigned char * | additional, | |||
size_t | add_len | |||
) |
HMAC_DRBG generate random with additional update input.
Note: Automatically reseeds if reseed_counter is reached or PR is enabled.
p_rng | HMAC_DRBG context | |
output | Buffer to fill | |
output_len | Length of the buffer | |
additional | Additional data to update with (can be NULL) | |
add_len | Length of additional data (can be 0) |
int mbedtls_hmac_drbg_reseed | ( | mbedtls_hmac_drbg_context * | ctx, | |
const unsigned char * | additional, | |||
size_t | len | |||
) |
HMAC_DRBG reseeding (extracts data from entropy source).
ctx | HMAC_DRBG context | |
additional | Additional data to add to state (Can be NULL) | |
len | Length of additional data |
int mbedtls_hmac_drbg_seed | ( | mbedtls_hmac_drbg_context * | ctx, | |
const mbedtls_md_info_t * | md_info, | |||
int(*)(void *, unsigned char *, size_t) | f_entropy, | |||
void * | p_entropy, | |||
const unsigned char * | custom, | |||
size_t | len | |||
) |
HMAC_DRBG initial seeding Seed and setup entropy source for future reseeds.
ctx | HMAC_DRBG context to be seeded | |
md_info | MD algorithm to use for HMAC_DRBG | |
f_entropy | Entropy callback (p_entropy, buffer to fill, buffer length) | |
p_entropy | Entropy context | |
custom | Personalization data (Device specific identifiers) (Can be NULL) | |
len | Length of personalization data |
int mbedtls_hmac_drbg_seed_buf | ( | mbedtls_hmac_drbg_context * | ctx, | |
const mbedtls_md_info_t * | md_info, | |||
const unsigned char * | data, | |||
size_t | data_len | |||
) |
Initilisation of simpified HMAC_DRBG (never reseeds). (For use with deterministic ECDSA.).
ctx | HMAC_DRBG context to be initialised | |
md_info | MD algorithm to use for HMAC_DRBG | |
data | Concatenation of entropy string and additional data | |
data_len | Length of data in bytes |
int mbedtls_hmac_drbg_self_test | ( | int | verbose | ) |
Checkup routine.
void mbedtls_hmac_drbg_set_entropy_len | ( | mbedtls_hmac_drbg_context * | ctx, | |
size_t | len | |||
) |
Set the amount of entropy grabbed on each reseed (Default: given by the security strength, which depends on the hash used, see mbedtls_hmac_drbg_init()
).
ctx | HMAC_DRBG context | |
len | Amount of entropy to grab, in bytes |
void mbedtls_hmac_drbg_set_prediction_resistance | ( | mbedtls_hmac_drbg_context * | ctx, | |
int | resistance | |||
) |
Enable / disable prediction resistance (Default: Off).
Note: If enabled, entropy is used for ctx->entropy_len before each call! Only use this if you have ample supply of good entropy!
ctx | HMAC_DRBG context | |
resistance | MBEDTLS_HMAC_DRBG_PR_ON or MBEDTLS_HMAC_DRBG_PR_OFF |
void mbedtls_hmac_drbg_set_reseed_interval | ( | mbedtls_hmac_drbg_context * | ctx, | |
int | interval | |||
) |
Set the reseed interval (Default: MBEDTLS_HMAC_DRBG_RESEED_INTERVAL).
ctx | HMAC_DRBG context | |
interval | Reseed interval |
void mbedtls_hmac_drbg_update | ( | mbedtls_hmac_drbg_context * | ctx, | |
const unsigned char * | additional, | |||
size_t | add_len | |||
) |
HMAC_DRBG update state.
ctx | HMAC_DRBG context | |
additional | Additional data to update state with, or NULL | |
add_len | Length of additional data, or 0 |
int mbedtls_hmac_drbg_update_ret | ( | mbedtls_hmac_drbg_context * | ctx, | |
const unsigned char * | additional, | |||
size_t | add_len | |||
) |
HMAC_DRBG update state.
ctx | HMAC_DRBG context | |
additional | Additional data to update state with, or NULL | |
add_len | Length of additional data, or 0 |
0
on success, or an error from the underlying hash calculation.int mbedtls_hmac_drbg_update_seed_file | ( | mbedtls_hmac_drbg_context * | ctx, | |
const char * | path | |||
) |
Read and update a seed file. Seed is added to this instance.
ctx | HMAC_DRBG context | |
path | Name of the file |
int mbedtls_hmac_drbg_write_seed_file | ( | mbedtls_hmac_drbg_context * | ctx, | |
const char * | path | |||
) |
Write a seed file.
ctx | HMAC_DRBG context | |
path | Name of the file |