/* liboqs.c * * Copyright (C) 2006-2023 wolfSSL Inc. * * This file is part of wolfSSL. * * wolfSSL is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * wolfSSL is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA */ /* DESCRIPTION This library provides the support interfaces to the liboqs library providing implementations for Post-Quantum cryptography algorithms. */ #ifdef HAVE_CONFIG_H #include #endif #include #include #include #include #if defined(HAVE_LIBOQS) /* RNG for liboqs */ static WC_RNG liboqsDefaultRNG; static WC_RNG* liboqsCurrentRNG; static wolfSSL_Mutex liboqsRNGMutex; static int liboqs_init = 0; static void wolfSSL_liboqsGetRandomData(uint8_t* buffer, size_t numOfBytes) { int ret = wc_RNG_GenerateBlock(liboqsCurrentRNG, buffer, numOfBytes); if (ret != 0) { // ToDo: liboqs exits programm if RNG fails, not sure what to do here } } int wolfSSL_liboqsInit(void) { int ret = 0; if (liboqs_init == 0) { ret = wc_InitMutex(&liboqsRNGMutex); if (ret != 0) { return ret; } ret = wc_LockMutex(&liboqsRNGMutex); if (ret != 0) { return ret; } ret = wc_InitRng(&liboqsDefaultRNG); if (ret == 0) { OQS_init(); liboqs_init = 1; } liboqsCurrentRNG = &liboqsDefaultRNG; wc_UnLockMutex(&liboqsRNGMutex); OQS_randombytes_custom_algorithm(wolfSSL_liboqsGetRandomData); } return ret; } int wolfSSL_liboqsRngMutexLock(WC_RNG* rng) { int ret = wolfSSL_liboqsInit(); if (ret == 0) { ret = wc_LockMutex(&liboqsRNGMutex); } if (ret == 0 && rng != NULL) { /* Update the pointer with the RNG to use. This is safe as we locked the mutex */ liboqsCurrentRNG = rng; } return ret; } int wolfSSL_liboqsRngMutexUnlock(void) { int ret = BAD_MUTEX_E; liboqsCurrentRNG = &liboqsDefaultRNG; if (liboqs_init) { ret = wc_UnLockMutex(&liboqsRNGMutex); } return ret; } #endif /* HAVE_LIBOQS */