Add random data generation

2 files changed, 15 insertions, 0 deletions

diff --git a/include/ncrypto/ncrypto.h b/include/ncrypto/ncrypto.h
index ada244b..b23a8c4 100644
--- a/include/ncrypto/ncrypto.h
+++ b/include/ncrypto/ncrypto.h
@@ -47,6 +47,10 @@ Red Hat author: Miloslav Trmač <mitr@redhat.com> */
 CK_RV ncr_open (void);
 CK_RV ncr_close (void);
 
+ /* Random numbers */
+
+CK_RV ncr_get_random_bytes (void *dest, size_t size);
+
  /* Symmetric keys */
 
 struct ncr_symm_key;
diff --git a/lib/ncrypto_local.c b/lib/ncrypto_local.c
index 8c65789..366963a 100644
--- a/lib/ncrypto_local.c
+++ b/lib/ncrypto_local.c
@@ -32,6 +32,7 @@ Red Hat author: Miloslav Trmač <mitr@redhat.com> */
 
 #include <glib.h>
 #include <openssl/evp.h>
+#include <openssl/rand.h>
 
 #include <ncrypto/ncrypto.h>
 
@@ -44,6 +45,16 @@ ckr_openssl (void)
   return CKR_GENERAL_ERROR;
 }
 
+ /* Random numbers */
+
+CK_RV
+ncr_get_random_bytes (void *dest, size_t size)
+{
+  /* This is not strong enough, we need cryptographically strong random
+     numbers! */
+  return RAND_pseudo_bytes (dest, size) != 0 ? CKR_OK : ckr_openssl ();
+}
+
  /* Symmetric keys */
 
 struct ncr_symm_key