/*      $NetBSD: efirng.c,v 1.4 2022/08/14 11:26:41 jmcneill Exp $      */

/*-
* Copyright (c) 2020 The NetBSD Foundation, Inc.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*    notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*    notice, this list of conditions and the following disclaimer in the
*    documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
* ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
* TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*/

/*
* UEFI Forum, Inc.: UEFI Specification, Version 2.8 Errata A, February
* 2020, Sec. 37.5 EFI Random Number Generator Protocol, pp. 2158--2162
* https://uefi.org/sites/default/files/resources/UEFI_Spec_2_8_A_Feb14.pdf
*/

#include "efirng.h"

#include "efiboot.h"

static EFI_GUID RngProtocolGuid = EFI_RNG_PROTOCOL_GUID;
static EFI_GUID RngAlgorithmRawGuid = EFI_RNG_ALGORITHM_RAW;
static EFI_RNG_PROTOCOL *rng;

#ifndef EFIBOOT_DEBUG
#define DPRINT(...)     __nothing
#else
#define DPRINT          Print
#endif

static const struct {
       EFI_GUID guid;
       const CHAR16 *name;
} algname[] = {
       {EFI_RNG_ALGORITHM_SP800_90_HASH_256_GUID,
        L"NIST SP800-90 Hash_DRBG SHA-256"},
       {EFI_RNG_ALGORITHM_SP800_90_HMAC_256_GUID,
        L"NIST SP800-90 HMAC_DRBG SHA-256"},
       {EFI_RNG_ALGORITHM_SP800_90_CTR_256_GUID,
        L"NIST SP800-90 CTR_DRBG AES-256"},
       {EFI_RNG_ALGORITHM_X9_31_3DES_GUID, L"ANSI X9.31 3DES"},
       {EFI_RNG_ALGORITHM_X9_31_AES_GUID, L"ANSI X9.31 AES"},
       {EFI_RNG_ALGORITHM_RAW, L"raw"},
};

void
efi_rng_probe(void)
{
       EFI_STATUS status;

       /* Get the RNG protocol.  */
       status = LibLocateProtocol(&RngProtocolGuid, (void **)&rng);
       if (EFI_ERROR(status)) {
               DPRINT(L"efirng: protocol: %r\n", status);
               rng = NULL;
               return;
       }
}

void
efi_rng_show(void)
{
       EFI_RNG_ALGORITHM alglist[10];
       UINTN i, j, alglistsz = sizeof(alglist);
       EFI_STATUS status;

       if (!efi_rng_available())
               return;

       command_printtab("RNG", "");

       /* Query the list of supported algorithms.  */
       status = uefi_call_wrapper(rng->GetInfo, 3, rng, &alglistsz, alglist);
       if (EFI_ERROR(status)) {
               Print(L"GetInfo: %r\n", status);
               return;
       }

       /* Print the list of supported algorithms.  */
       for (i = 0; i < alglistsz/sizeof(alglist[0]); i++) {
               const CHAR16 *name = L"[unknown]";
               for (j = 0; j < __arraycount(algname); j++) {
                       if (memcmp(&alglist[i], &algname[j].guid,
                               sizeof(EFI_GUID)) == 0) {
                               name = algname[j].name;
                               break;
                       }
               }
               Print(L"%s (%g)\n", name, &alglist[i]);
       }
}

int
efi_rng_available(void)
{

       return rng != NULL;
}

int
efi_rng(void *buf, UINTN len)
{
       EFI_STATUS status;

       if (!efi_rng_available())
               return EIO;

       status = uefi_call_wrapper(rng->GetRNG, 4, rng, &RngAlgorithmRawGuid,
           len, buf);
       if (status == EFI_UNSUPPORTED) {
               /*
                * Fall back to any supported RNG `algorithm' even
                * though we would prefer raw samples.
                */
               status = uefi_call_wrapper(rng->GetRNG, 4, rng, NULL, len, buf);
       }
       if (EFI_ERROR(status)) {
               DPRINT(L"efirng: GetRNG: %r\n", status);
               return EIO;
       }

       return 0;
}