2018-02-20 11:19:35 +00:00
|
|
|
#include <stdint.h>
|
2018-02-22 23:32:47 +00:00
|
|
|
#include <string.h>
|
2018-02-20 11:19:35 +00:00
|
|
|
|
|
|
|
#include "utils.h"
|
|
|
|
#include "randomcache.h"
|
|
|
|
#include "se.h"
|
2018-02-27 21:29:47 +00:00
|
|
|
#include "arm.h"
|
2018-02-20 11:19:35 +00:00
|
|
|
|
|
|
|
/* TrustZone maintains a cache of random for the kernel. */
|
|
|
|
/* So that requests can still be serviced even when a */
|
|
|
|
/* usermode SMC is in progress. */
|
|
|
|
|
2018-02-25 19:00:50 +00:00
|
|
|
static uint8_t g_random_cache[0x400];
|
|
|
|
static unsigned int g_random_cache_low = 0;
|
|
|
|
static unsigned int g_random_cache_high = 0x3FF;
|
2018-02-20 11:19:35 +00:00
|
|
|
|
|
|
|
|
|
|
|
void randomcache_refill_segment(unsigned int offset, unsigned int size) {
|
|
|
|
if (offset + size >= 0x400) {
|
|
|
|
size = 0x400 - offset;
|
|
|
|
}
|
2018-02-25 19:00:50 +00:00
|
|
|
|
2018-02-20 11:19:35 +00:00
|
|
|
flush_dcache_range(&g_random_cache[offset], &g_random_cache[offset + size]);
|
|
|
|
se_generate_random(KEYSLOT_SWITCH_RNGKEY, &g_random_cache[offset], size);
|
|
|
|
flush_dcache_range(&g_random_cache[offset], &g_random_cache[offset + size]);
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
void randomcache_init(void) {
|
|
|
|
randomcache_refill_segment(0, 0x400);
|
|
|
|
g_random_cache_low = 0;
|
|
|
|
g_random_cache_high = 0x3FF;
|
|
|
|
}
|
|
|
|
|
|
|
|
void randomcache_refill(void) {
|
|
|
|
unsigned int high_plus_one = (g_random_cache_high + 1) & 0x3FF;
|
|
|
|
if (g_random_cache_low != high_plus_one) {
|
|
|
|
/* Only refill if there's data to refill. */
|
|
|
|
if (g_random_cache_low < high_plus_one) {
|
|
|
|
/* NOTE: There is a bug in official code that causes this to not work properly. */
|
|
|
|
/* In particular, official code checks whether high_plus_one == 0x400. */
|
|
|
|
/* However, because high_plus_one is &= 0x3FF'd, this can never be the case. */
|
|
|
|
/* We will implement according to Nintendo's intention, and not include their bug. */
|
|
|
|
/* This should have no impact on actual observable results, anyway, since this data is random anyway... */
|
|
|
|
|
|
|
|
if (g_random_cache_high != 0x3FF) { /* This is if (true) in Nintendo's code due to the above bug. */
|
|
|
|
randomcache_refill_segment(high_plus_one, 0x400 - high_plus_one);
|
|
|
|
g_random_cache_high = (g_random_cache_high + 0x400 - high_plus_one) & 0x3FF;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (g_random_cache_low > 0) {
|
|
|
|
randomcache_refill_segment(0, g_random_cache_low);
|
|
|
|
g_random_cache_high = (g_random_cache_high + g_random_cache_low) & 0x3FF;
|
|
|
|
}
|
|
|
|
} else { /* g_random_cache_low > high_plus_one */
|
|
|
|
randomcache_refill_segment(high_plus_one, g_random_cache_low - high_plus_one);
|
2018-02-23 13:40:47 +00:00
|
|
|
g_random_cache_high = g_random_cache_low - 1;
|
2018-02-20 11:19:35 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
void randomcache_getbytes(void *dst, size_t num_bytes) {
|
|
|
|
unsigned int low = g_random_cache_low;
|
|
|
|
|
|
|
|
memcpy(dst, &g_random_cache[low], num_bytes);
|
|
|
|
|
|
|
|
unsigned int new_low = low + num_bytes;
|
|
|
|
if (new_low + 0x38 > 0x3FF) {
|
|
|
|
new_low = 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
g_random_cache_low = new_low;
|
2018-02-25 19:00:50 +00:00
|
|
|
}
|