/*
 * Copyright 2021-2025 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the >License>).  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

#include <openssl/evp.h>
#include <openssl/rand.h>
#include <openssl/bio.h>
#include <openssl/core_names.h>
#include <openssl/params.h>
#include "crypto/rand.h"
#include "testutil.h"

static char *configfile;

static int test_rand(void)
{
    EVP_RAND_CTX *privctx;
    const OSSL_PROVIDER *prov;
    int indicator = 1;
    OSSL_PARAM params[2], *p = params;
    unsigned char entropy1[] = { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05 };
    unsigned char entropy2[] = { 0xff, 0xfe, 0xfd };
    unsigned char nonce[] = { 0x00, 0x01, 0x02, 0x03, 0x04 };
    unsigned char outbuf[3];

    *p++ = OSSL_PARAM_construct_octet_string(OSSL_RAND_PARAM_TEST_ENTROPY,
        entropy1, sizeof(entropy1));
    *p = OSSL_PARAM_construct_end();

    if (!TEST_ptr(privctx = RAND_get0_private(NULL))
        || !TEST_true(EVP_RAND_CTX_set_params(privctx, params))
        || !TEST_int_gt(RAND_priv_bytes(outbuf, sizeof(outbuf)), 0)
        || !TEST_mem_eq(outbuf, sizeof(outbuf), entropy1, sizeof(outbuf))
        || !TEST_int_le(RAND_priv_bytes(outbuf, sizeof(outbuf) + 1), 0)
        || !TEST_int_gt(RAND_priv_bytes(outbuf, sizeof(outbuf)), 0)
        || !TEST_mem_eq(outbuf, sizeof(outbuf),
            entropy1 + sizeof(outbuf), sizeof(outbuf)))
        return 0;

    *params = OSSL_PARAM_construct_octet_string(OSSL_RAND_PARAM_TEST_ENTROPY,
        entropy2, sizeof(entropy2));
    if (!TEST_true(EVP_RAND_CTX_set_params(privctx, params))
        || !TEST_int_gt(RAND_priv_bytes(outbuf, sizeof(outbuf)), 0)
        || !TEST_mem_eq(outbuf, sizeof(outbuf), entropy2, sizeof(outbuf)))
        return 0;

    *params = OSSL_PARAM_construct_octet_string(OSSL_RAND_PARAM_TEST_NONCE,
        nonce, sizeof(nonce));
    if (!TEST_true(EVP_RAND_CTX_set_params(privctx, params))
        || !TEST_true(EVP_RAND_nonce(privctx, outbuf, sizeof(outbuf)))
        || !TEST_mem_eq(outbuf, sizeof(outbuf), nonce, sizeof(outbuf)))
        return 0;

    if (fips_provider_version_lt(NULL, 3, 4, 0)) {
        /* Skip the rest and pass the test */
        return 1;
    }
    /* Verify that the FIPS indicator can be read and is false */
    prov = EVP_RAND_get0_provider(EVP_RAND_CTX_get0_rand(privctx));
    if (prov != NULL
        && strcmp(OSSL_PROVIDER_get0_name(prov), "fips") == 0) {
        params[0] = OSSL_PARAM_construct_int(OSSL_RAND_PARAM_FIPS_APPROVED_INDICATOR,
            &indicator);
        if (!TEST_true(EVP_RAND_CTX_get_params(privctx, params))
            || !TEST_int_eq(indicator, 0))
            return 0;
    }
    return 1;
}

static int test_rand_uniform(void)
{
    uint32_t x, i, j;
    int err = 0, res = 0;
    OSSL_LIB_CTX *ctx;

    if (!test_get_libctx(&ctx, NULL, NULL, NULL, NULL))
        goto err;

    for (i = 1; i < 100; i += 13) {
        x = ossl_rand_uniform_uint32(ctx, i, &err);
        if (!TEST_int_eq(err, 0)
            || !TEST_uint_ge(x, 0)
            || !TEST_uint_lt(x, i))
            return 0;
    }
    for (i = 1; i < 100; i += 17)
        for (j = i + 1; j < 150; j += 11) {
            x = ossl_rand_range_uint32(ctx, i, j, &err);
            if (!TEST_int_eq(err, 0)
                || !TEST_uint_ge(x, i)
                || !TEST_uint_lt(x, j))
                return 0;
        }

    res = 1;
err:
    OSSL_LIB_CTX_free(ctx);
    return res;
}

/*
 * Check that creating the primary DRBG creates the seed source and
 * stores it in the library context: later users must keep getting the
 * same instance and no replacement may be created.
 */
static int test_rand_primary_seed_stored(void)
{
    OSSL_LIB_CTX *ctx = NULL;
    EVP_RAND_CTX *seed;
    unsigned char buf[16];
    int ok, res = 0;

    if (!TEST_ptr(ctx = OSSL_LIB_CTX_new())
        || !TEST_ptr_null(ossl_rand_get0_seed_noncreating(ctx)))
        goto err;

    /* The default seed source may be unavailable in some configurations */
    ERR_set_mark();
    ok = RAND_bytes_ex(ctx, buf, sizeof(buf), 0) > 0;
    ERR_pop_to_mark();
    if (!ok) {
        TEST_info("skipped: cannot instantiate the primary DRBG");
        res = 1;
        goto err;
    }

    seed = ossl_rand_get0_seed_noncreating(ctx);
    if (seed == NULL) {
        /* The seed source silently fell back to operating system entropy */
        TEST_info("skipped: no seed source was created");
        res = 1;
        goto err;
    }

    if (!TEST_int_gt(RAND_bytes_ex(ctx, buf, sizeof(buf), 0), 0)
        || !TEST_ptr_eq(ossl_rand_get0_seed_noncreating(ctx), seed))
        goto err;

    res = 1;
err:
    OSSL_LIB_CTX_free(ctx);
    return res;
}

/* Test the FIPS health tests */
static int fips_health_test_one(const uint8_t *buf, size_t n, size_t gen)
{
    int res = 0;
    EVP_RAND *crngt_alg = NULL, *parent_alg = NULL;
    EVP_RAND_CTX *crngt = NULL, *parent = NULL;
    OSSL_PARAM p[2];
    uint8_t out[1000];
    int indicator = -1;

    p[0] = OSSL_PARAM_construct_octet_string(OSSL_RAND_PARAM_TEST_ENTROPY,
        (void *)buf, n);
    p[1] = OSSL_PARAM_construct_end();

    if (!TEST_ptr(parent_alg = EVP_RAND_fetch(NULL, "TEST-RAND", "-fips"))
        || !TEST_ptr(crngt_alg = EVP_RAND_fetch(NULL, "CRNG-TEST", "-fips"))
        || !TEST_ptr(parent = EVP_RAND_CTX_new(parent_alg, NULL))
        || !TEST_ptr(crngt = EVP_RAND_CTX_new(crngt_alg, parent))
        || !TEST_true(EVP_RAND_instantiate(parent, 0, 0,
            (unsigned char *)"abc", 3, p))
        || !TEST_true(EVP_RAND_instantiate(crngt, 0, 0,
            (unsigned char *)"def", 3, NULL))
        || !TEST_size_t_le(gen, sizeof(out)))
        goto err;

    /* Verify that the FIPS indicator is negative */
    p[0] = OSSL_PARAM_construct_int(OSSL_RAND_PARAM_FIPS_APPROVED_INDICATOR,
        &indicator);
    if (!TEST_true(EVP_RAND_CTX_get_params(crngt, p))
        || !TEST_int_le(indicator, 0))
        goto err;

    ERR_set_mark();
    res = EVP_RAND_generate(crngt, out, gen, 0, 0, NULL, 0);
    ERR_pop_to_mark();
err:
    EVP_RAND_CTX_free(crngt);
    EVP_RAND_CTX_free(parent);
    EVP_RAND_free(crngt_alg);
    EVP_RAND_free(parent_alg);
    return res;
}

static int fips_health_tests(void)
{
    uint8_t buf[1000];
    size_t i;

    /* Verify tests can pass */
    for (i = 0; i < sizeof(buf); i++)
        buf[i] = 0xff & i;
    if (!TEST_true(fips_health_test_one(buf, i, i)))
        return 0;

    /* Verify RCT can fail */
    for (i = 0; i < 20; i++)
        buf[i] = 0xff & (i > 10 ? 200 : i);
    if (!TEST_false(fips_health_test_one(buf, i, i)))
        return 0;

    /* Verify APT can fail */
    for (i = 0; i < sizeof(buf); i++)
        buf[i] = 0xff & (i >= 512 && i % 8 == 0 ? 0x80 : i);
    if (!TEST_false(fips_health_test_one(buf, i, i)))
        return 0;
    return 1;
}

typedef struct r_test_ctx {
    const OSSL_CORE_HANDLE *handle;
} R_TEST_CTX;

static void r_teardown(void *provctx)
{
    R_TEST_CTX *ctx = (R_TEST_CTX *)provctx;

    free(ctx);
}

static int r_random_bytes(ossl_unused void *vprov, ossl_unused int which,
    void *buf, size_t n, ossl_unused unsigned int strength)
{
    while (n-- > 0)
        ((unsigned char *)buf)[n] = 0xff & n;
    return 1;
}

static const OSSL_DISPATCH r_test_table[] = {
    { OSSL_FUNC_PROVIDER_RANDOM_BYTES, (void (*)(void))r_random_bytes },
    { OSSL_FUNC_PROVIDER_TEARDOWN, (void (*)(void))r_teardown },
    OSSL_DISPATCH_END
};

static int r_init(const OSSL_CORE_HANDLE *handle,
    ossl_unused const OSSL_DISPATCH *oin,
    const OSSL_DISPATCH **out,
    void **provctx)
{
    R_TEST_CTX *ctx;

    ctx = malloc(sizeof(*ctx));
    if (ctx == NULL)
        return 0;
    ctx->handle = handle;

    *provctx = (void *)ctx;
    *out = r_test_table;
    return 1;
}

static int test_rand_random_provider(void)
{
    OSSL_LIB_CTX *ctx = NULL;
    OSSL_PROVIDER *prov = NULL;
    int res = 0;
    static const unsigned char data[] = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 };
    unsigned char buf[sizeof(data)], privbuf[sizeof(data)];

    memset(buf, 255, sizeof(buf));
    memset(privbuf, 255, sizeof(privbuf));

    if (!test_get_libctx(&ctx, NULL, NULL, NULL, NULL)
        || !TEST_true(OSSL_PROVIDER_add_builtin(ctx, "r_prov", &r_init))
        || !TEST_ptr(prov = OSSL_PROVIDER_try_load(ctx, "r_prov", 1))
        || !TEST_true(RAND_set1_random_provider(ctx, prov))
        || !RAND_bytes_ex(ctx, buf, sizeof(buf), 256)
        || !TEST_mem_eq(buf, sizeof(buf), data, sizeof(data))
        || !RAND_priv_bytes_ex(ctx, privbuf, sizeof(privbuf), 256)
        || !TEST_mem_eq(privbuf, sizeof(privbuf), data, sizeof(data)))
        goto err;

    /* Test we can revert to not using the provider based randomness */
    if (!TEST_true(RAND_set1_random_provider(ctx, NULL))
        || !RAND_bytes_ex(ctx, buf, sizeof(buf), 256)
        || !TEST_mem_ne(buf, sizeof(buf), data, sizeof(data)))
        goto err;

    /* And back to the provided randomness */
    if (!TEST_true(RAND_set1_random_provider(ctx, prov))
        || !RAND_bytes_ex(ctx, buf, sizeof(buf), 256)
        || !TEST_mem_eq(buf, sizeof(buf), data, sizeof(data)))
        goto err;

    res = 1;
err:
    OSSL_PROVIDER_unload(prov);
    OSSL_LIB_CTX_free(ctx);
    return res;
}

static int test_rand_get0_primary(void)
{
    OSSL_LIB_CTX *ctx = OSSL_LIB_CTX_new();
    int res = 0;

    if (!TEST_ptr(ctx))
        return 0;

    if (!TEST_true(OSSL_LIB_CTX_load_config(ctx, configfile)))
        goto err;

    /* We simply test that we get a valid primary */
    if (!TEST_ptr(RAND_get0_primary(ctx)))
        goto err;

    res = 1;
err:
    OSSL_LIB_CTX_free(ctx);
    return res;
}

/* Warm up the DRBG cipher fetch caches outside the mfail injection window */
static int rand_drbg_fetch_warmup(EVP_RAND *drbg_alg)
{
    EVP_RAND_CTX *warm;
    OSSL_PARAM params[3];
    int ret;

    params[0] = OSSL_PARAM_construct_utf8_string(OSSL_DRBG_PARAM_CIPHER,
        (char *)"AES-256-CTR", 0);
    params[1] = OSSL_PARAM_construct_utf8_string(OSSL_PROV_PARAM_CORE_PROV_NAME,
        (char *)"default", 0);
    params[2] = OSSL_PARAM_construct_end();

    if (!TEST_ptr(warm = EVP_RAND_CTX_new(drbg_alg, NULL)))
        return 0;
    ret = TEST_true(EVP_RAND_CTX_set_params(warm, params));
    EVP_RAND_CTX_free(warm);
    return ret;
}

/*
 * Memory-failure coverage for the whole random generation stack on a fresh
 * library context: the seed source and DRBG chain creation and seeding.
 */
static int test_rand_bytes_mfail(int idx)
{
    OSSL_LIB_CTX *ctx = NULL;
    EVP_RAND *drbg = NULL, *seed = NULL;
    unsigned char buf[16];
    int rc = -1;

    if (!TEST_ptr(ctx = OSSL_LIB_CTX_new())
        || !TEST_ptr(drbg = EVP_RAND_fetch(ctx, "CTR-DRBG", NULL))
        || !rand_drbg_fetch_warmup(drbg))
        goto end;
    /* The default seed source may be unavailable in some configurations */
    ERR_set_mark();
    seed = EVP_RAND_fetch(ctx, OPENSSL_SEED_SRC_NAME, NULL);
    ERR_pop_to_mark();

    MFAIL_start();
    rc = (idx == 0 ? RAND_bytes_ex(ctx, buf, sizeof(buf), 0)
                   : RAND_priv_bytes_ex(ctx, buf, sizeof(buf), 0))
        > 0;
    MFAIL_end();

end:
    EVP_RAND_free(seed);
    EVP_RAND_free(drbg);
    OSSL_LIB_CTX_free(ctx);
    return rc;
}

/* Memory-failure coverage for the seed source entropy acquisition. */
static int test_rand_seed_src_mfail(void)
{
    OSSL_LIB_CTX *ctx = NULL;
    EVP_RAND *rand = NULL;
    EVP_RAND_CTX *seed = NULL;
    unsigned char buf[64];
    int rc = -1;

    if (!TEST_ptr(ctx = OSSL_LIB_CTX_new())
        || !TEST_ptr(rand = EVP_RAND_fetch(ctx, OPENSSL_SEED_SRC_NAME, NULL)))
        goto end;

    MFAIL_start();
    rc = (seed = EVP_RAND_CTX_new(rand, NULL)) != NULL
        && EVP_RAND_instantiate(seed, 0, 0, NULL, 0, NULL)
        && EVP_RAND_generate(seed, buf, sizeof(buf), 0, 0, NULL, 0);
    MFAIL_end();

end:
    EVP_RAND_CTX_free(seed);
    EVP_RAND_free(rand);
    OSSL_LIB_CTX_free(ctx);
    return rc;
}

/* Memory-failure coverage for the DRBG operations with a TEST-RAND parent */
static int test_rand_drbg_mfail(void)
{
    OSSL_LIB_CTX *ctx = NULL;
    EVP_RAND *parent_alg = NULL, *drbg_alg = NULL;
    EVP_RAND_CTX *parent = NULL, *drbg = NULL;
    unsigned int strength = 256, generate = 1;
    unsigned char entropy[128];
    unsigned char buf[32];
    OSSL_PARAM parent_params[4], drbg_params[3];
    size_t i;
    int rc = -1;

    for (i = 0; i < sizeof(entropy); i++)
        entropy[i] = 0xff & i;
    parent_params[0] = OSSL_PARAM_construct_uint(OSSL_RAND_PARAM_STRENGTH,
        &strength);
    parent_params[1] = OSSL_PARAM_construct_uint(OSSL_RAND_PARAM_GENERATE,
        &generate);
    parent_params[2] = OSSL_PARAM_construct_octet_string(
        OSSL_RAND_PARAM_TEST_ENTROPY, entropy, sizeof(entropy));
    parent_params[3] = OSSL_PARAM_construct_end();

    drbg_params[0] = OSSL_PARAM_construct_utf8_string(OSSL_DRBG_PARAM_CIPHER,
        (char *)"AES-256-CTR", 0);
    drbg_params[1] = OSSL_PARAM_construct_utf8_string(
        OSSL_PROV_PARAM_CORE_PROV_NAME, (char *)"default", 0);
    drbg_params[2] = OSSL_PARAM_construct_end();

    if (!TEST_ptr(ctx = OSSL_LIB_CTX_new())
        || !TEST_ptr(parent_alg = EVP_RAND_fetch(ctx, "TEST-RAND", NULL))
        || !TEST_ptr(drbg_alg = EVP_RAND_fetch(ctx, "CTR-DRBG", NULL))
        || !rand_drbg_fetch_warmup(drbg_alg)
        || !TEST_ptr(parent = EVP_RAND_CTX_new(parent_alg, NULL))
        || !TEST_true(EVP_RAND_instantiate(parent, 0, 0, NULL, 0,
            parent_params)))
        goto end;

    MFAIL_start();
    rc = (drbg = EVP_RAND_CTX_new(drbg_alg, parent)) != NULL
        && EVP_RAND_instantiate(drbg, 0, 0, (unsigned char *)"abc", 3,
            drbg_params)
        && EVP_RAND_generate(drbg, buf, sizeof(buf), 0, 0, NULL, 0)
        && EVP_RAND_reseed(drbg, 0, NULL, 0, (unsigned char *)"xyz", 3)
        && EVP_RAND_generate(drbg, buf, sizeof(buf), 0, 0,
            (unsigned char *)"adin", 4);
    MFAIL_end();

end:
    EVP_RAND_CTX_free(drbg);
    EVP_RAND_CTX_free(parent);
    EVP_RAND_free(parent_alg);
    EVP_RAND_free(drbg_alg);
    OSSL_LIB_CTX_free(ctx);
    return rc;
}

int setup_tests(void)
{
    if (!test_skip_common_options()) {
        TEST_error("Error parsing test options\n");
        return 0;
    }

    if (!TEST_ptr(configfile = test_get_argument(0))
        || !TEST_true(RAND_set_DRBG_type(NULL, "TEST-RAND", "fips=no",
            NULL, NULL))
        || (fips_provider_version_ge(NULL, 3, 0, 8)
            && !TEST_true(OSSL_LIB_CTX_load_config(NULL, configfile))))
        return 0;

    ADD_TEST(test_rand);
    ADD_TEST(test_rand_uniform);
    ADD_TEST(test_rand_primary_seed_stored);

    if (OSSL_PROVIDER_available(NULL, "fips")
        && fips_provider_version_ge(NULL, 3, 4, 0))
        ADD_TEST(fips_health_tests);

    ADD_TEST(test_rand_random_provider);

    if (!OSSL_PROVIDER_available(NULL, "fips")
        || fips_provider_version_ge(NULL, 3, 5, 1))
        ADD_TEST(test_rand_get0_primary);

    ADD_MFAIL_ALL_TESTS(test_rand_bytes_mfail, 2);
    ADD_MFAIL_TEST(test_rand_seed_src_mfail);
    ADD_MFAIL_TEST(test_rand_drbg_mfail);
    return 1;
}