1*9356374aSAndroid Build Coastguard Worker // Copyright 2017 The Abseil Authors.
2*9356374aSAndroid Build Coastguard Worker //
3*9356374aSAndroid Build Coastguard Worker // Licensed under the Apache License, Version 2.0 (the "License");
4*9356374aSAndroid Build Coastguard Worker // you may not use this file except in compliance with the License.
5*9356374aSAndroid Build Coastguard Worker // You may obtain a copy of the License at
6*9356374aSAndroid Build Coastguard Worker //
7*9356374aSAndroid Build Coastguard Worker // https://www.apache.org/licenses/LICENSE-2.0
8*9356374aSAndroid Build Coastguard Worker //
9*9356374aSAndroid Build Coastguard Worker // Unless required by applicable law or agreed to in writing, software
10*9356374aSAndroid Build Coastguard Worker // distributed under the License is distributed on an "AS IS" BASIS,
11*9356374aSAndroid Build Coastguard Worker // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12*9356374aSAndroid Build Coastguard Worker // See the License for the specific language governing permissions and
13*9356374aSAndroid Build Coastguard Worker // limitations under the License.
14*9356374aSAndroid Build Coastguard Worker
15*9356374aSAndroid Build Coastguard Worker #include "absl/random/internal/pool_urbg.h"
16*9356374aSAndroid Build Coastguard Worker
17*9356374aSAndroid Build Coastguard Worker #include <algorithm>
18*9356374aSAndroid Build Coastguard Worker #include <atomic>
19*9356374aSAndroid Build Coastguard Worker #include <cstdint>
20*9356374aSAndroid Build Coastguard Worker #include <cstring>
21*9356374aSAndroid Build Coastguard Worker #include <iterator>
22*9356374aSAndroid Build Coastguard Worker
23*9356374aSAndroid Build Coastguard Worker #include "absl/base/attributes.h"
24*9356374aSAndroid Build Coastguard Worker #include "absl/base/call_once.h"
25*9356374aSAndroid Build Coastguard Worker #include "absl/base/config.h"
26*9356374aSAndroid Build Coastguard Worker #include "absl/base/internal/endian.h"
27*9356374aSAndroid Build Coastguard Worker #include "absl/base/internal/raw_logging.h"
28*9356374aSAndroid Build Coastguard Worker #include "absl/base/internal/spinlock.h"
29*9356374aSAndroid Build Coastguard Worker #include "absl/base/internal/sysinfo.h"
30*9356374aSAndroid Build Coastguard Worker #include "absl/base/internal/unaligned_access.h"
31*9356374aSAndroid Build Coastguard Worker #include "absl/base/optimization.h"
32*9356374aSAndroid Build Coastguard Worker #include "absl/random/internal/randen.h"
33*9356374aSAndroid Build Coastguard Worker #include "absl/random/internal/seed_material.h"
34*9356374aSAndroid Build Coastguard Worker #include "absl/random/seed_gen_exception.h"
35*9356374aSAndroid Build Coastguard Worker
36*9356374aSAndroid Build Coastguard Worker using absl::base_internal::SpinLock;
37*9356374aSAndroid Build Coastguard Worker using absl::base_internal::SpinLockHolder;
38*9356374aSAndroid Build Coastguard Worker
39*9356374aSAndroid Build Coastguard Worker namespace absl {
40*9356374aSAndroid Build Coastguard Worker ABSL_NAMESPACE_BEGIN
41*9356374aSAndroid Build Coastguard Worker namespace random_internal {
42*9356374aSAndroid Build Coastguard Worker namespace {
43*9356374aSAndroid Build Coastguard Worker
44*9356374aSAndroid Build Coastguard Worker // RandenPoolEntry is a thread-safe pseudorandom bit generator, implementing a
45*9356374aSAndroid Build Coastguard Worker // single generator within a RandenPool<T>. It is an internal implementation
46*9356374aSAndroid Build Coastguard Worker // detail, and does not aim to conform to [rand.req.urng].
47*9356374aSAndroid Build Coastguard Worker //
48*9356374aSAndroid Build Coastguard Worker // NOTE: There are alignment issues when used on ARM, for instance.
49*9356374aSAndroid Build Coastguard Worker // See the allocation code in PoolAlignedAlloc().
50*9356374aSAndroid Build Coastguard Worker class RandenPoolEntry {
51*9356374aSAndroid Build Coastguard Worker public:
52*9356374aSAndroid Build Coastguard Worker static constexpr size_t kState = RandenTraits::kStateBytes / sizeof(uint32_t);
53*9356374aSAndroid Build Coastguard Worker static constexpr size_t kCapacity =
54*9356374aSAndroid Build Coastguard Worker RandenTraits::kCapacityBytes / sizeof(uint32_t);
55*9356374aSAndroid Build Coastguard Worker
Init(absl::Span<const uint32_t> data)56*9356374aSAndroid Build Coastguard Worker void Init(absl::Span<const uint32_t> data) {
57*9356374aSAndroid Build Coastguard Worker SpinLockHolder l(&mu_); // Always uncontested.
58*9356374aSAndroid Build Coastguard Worker std::copy(data.begin(), data.end(), std::begin(state_));
59*9356374aSAndroid Build Coastguard Worker next_ = kState;
60*9356374aSAndroid Build Coastguard Worker }
61*9356374aSAndroid Build Coastguard Worker
62*9356374aSAndroid Build Coastguard Worker // Copy bytes into out.
63*9356374aSAndroid Build Coastguard Worker void Fill(uint8_t* out, size_t bytes) ABSL_LOCKS_EXCLUDED(mu_);
64*9356374aSAndroid Build Coastguard Worker
65*9356374aSAndroid Build Coastguard Worker // Returns random bits from the buffer in units of T.
66*9356374aSAndroid Build Coastguard Worker template <typename T>
67*9356374aSAndroid Build Coastguard Worker inline T Generate() ABSL_LOCKS_EXCLUDED(mu_);
68*9356374aSAndroid Build Coastguard Worker
MaybeRefill()69*9356374aSAndroid Build Coastguard Worker inline void MaybeRefill() ABSL_EXCLUSIVE_LOCKS_REQUIRED(mu_) {
70*9356374aSAndroid Build Coastguard Worker if (next_ >= kState) {
71*9356374aSAndroid Build Coastguard Worker next_ = kCapacity;
72*9356374aSAndroid Build Coastguard Worker impl_.Generate(state_);
73*9356374aSAndroid Build Coastguard Worker }
74*9356374aSAndroid Build Coastguard Worker }
75*9356374aSAndroid Build Coastguard Worker
76*9356374aSAndroid Build Coastguard Worker private:
77*9356374aSAndroid Build Coastguard Worker // Randen URBG state.
78*9356374aSAndroid Build Coastguard Worker uint32_t state_[kState] ABSL_GUARDED_BY(mu_); // First to satisfy alignment.
79*9356374aSAndroid Build Coastguard Worker SpinLock mu_;
80*9356374aSAndroid Build Coastguard Worker const Randen impl_;
81*9356374aSAndroid Build Coastguard Worker size_t next_ ABSL_GUARDED_BY(mu_);
82*9356374aSAndroid Build Coastguard Worker };
83*9356374aSAndroid Build Coastguard Worker
84*9356374aSAndroid Build Coastguard Worker template <>
Generate()85*9356374aSAndroid Build Coastguard Worker inline uint8_t RandenPoolEntry::Generate<uint8_t>() {
86*9356374aSAndroid Build Coastguard Worker SpinLockHolder l(&mu_);
87*9356374aSAndroid Build Coastguard Worker MaybeRefill();
88*9356374aSAndroid Build Coastguard Worker return static_cast<uint8_t>(state_[next_++]);
89*9356374aSAndroid Build Coastguard Worker }
90*9356374aSAndroid Build Coastguard Worker
91*9356374aSAndroid Build Coastguard Worker template <>
Generate()92*9356374aSAndroid Build Coastguard Worker inline uint16_t RandenPoolEntry::Generate<uint16_t>() {
93*9356374aSAndroid Build Coastguard Worker SpinLockHolder l(&mu_);
94*9356374aSAndroid Build Coastguard Worker MaybeRefill();
95*9356374aSAndroid Build Coastguard Worker return static_cast<uint16_t>(state_[next_++]);
96*9356374aSAndroid Build Coastguard Worker }
97*9356374aSAndroid Build Coastguard Worker
98*9356374aSAndroid Build Coastguard Worker template <>
Generate()99*9356374aSAndroid Build Coastguard Worker inline uint32_t RandenPoolEntry::Generate<uint32_t>() {
100*9356374aSAndroid Build Coastguard Worker SpinLockHolder l(&mu_);
101*9356374aSAndroid Build Coastguard Worker MaybeRefill();
102*9356374aSAndroid Build Coastguard Worker return state_[next_++];
103*9356374aSAndroid Build Coastguard Worker }
104*9356374aSAndroid Build Coastguard Worker
105*9356374aSAndroid Build Coastguard Worker template <>
Generate()106*9356374aSAndroid Build Coastguard Worker inline uint64_t RandenPoolEntry::Generate<uint64_t>() {
107*9356374aSAndroid Build Coastguard Worker SpinLockHolder l(&mu_);
108*9356374aSAndroid Build Coastguard Worker if (next_ >= kState - 1) {
109*9356374aSAndroid Build Coastguard Worker next_ = kCapacity;
110*9356374aSAndroid Build Coastguard Worker impl_.Generate(state_);
111*9356374aSAndroid Build Coastguard Worker }
112*9356374aSAndroid Build Coastguard Worker auto p = state_ + next_;
113*9356374aSAndroid Build Coastguard Worker next_ += 2;
114*9356374aSAndroid Build Coastguard Worker
115*9356374aSAndroid Build Coastguard Worker uint64_t result;
116*9356374aSAndroid Build Coastguard Worker std::memcpy(&result, p, sizeof(result));
117*9356374aSAndroid Build Coastguard Worker return result;
118*9356374aSAndroid Build Coastguard Worker }
119*9356374aSAndroid Build Coastguard Worker
Fill(uint8_t * out,size_t bytes)120*9356374aSAndroid Build Coastguard Worker void RandenPoolEntry::Fill(uint8_t* out, size_t bytes) {
121*9356374aSAndroid Build Coastguard Worker SpinLockHolder l(&mu_);
122*9356374aSAndroid Build Coastguard Worker while (bytes > 0) {
123*9356374aSAndroid Build Coastguard Worker MaybeRefill();
124*9356374aSAndroid Build Coastguard Worker size_t remaining = (kState - next_) * sizeof(state_[0]);
125*9356374aSAndroid Build Coastguard Worker size_t to_copy = std::min(bytes, remaining);
126*9356374aSAndroid Build Coastguard Worker std::memcpy(out, &state_[next_], to_copy);
127*9356374aSAndroid Build Coastguard Worker out += to_copy;
128*9356374aSAndroid Build Coastguard Worker bytes -= to_copy;
129*9356374aSAndroid Build Coastguard Worker next_ += (to_copy + sizeof(state_[0]) - 1) / sizeof(state_[0]);
130*9356374aSAndroid Build Coastguard Worker }
131*9356374aSAndroid Build Coastguard Worker }
132*9356374aSAndroid Build Coastguard Worker
133*9356374aSAndroid Build Coastguard Worker // Number of pooled urbg entries.
134*9356374aSAndroid Build Coastguard Worker static constexpr size_t kPoolSize = 8;
135*9356374aSAndroid Build Coastguard Worker
136*9356374aSAndroid Build Coastguard Worker // Shared pool entries.
137*9356374aSAndroid Build Coastguard Worker static absl::once_flag pool_once;
138*9356374aSAndroid Build Coastguard Worker ABSL_CACHELINE_ALIGNED static RandenPoolEntry* shared_pools[kPoolSize];
139*9356374aSAndroid Build Coastguard Worker
140*9356374aSAndroid Build Coastguard Worker // Returns an id in the range [0 ... kPoolSize), which indexes into the
141*9356374aSAndroid Build Coastguard Worker // pool of random engines.
142*9356374aSAndroid Build Coastguard Worker //
143*9356374aSAndroid Build Coastguard Worker // Each thread to access the pool is assigned a sequential ID (without reuse)
144*9356374aSAndroid Build Coastguard Worker // from the pool-id space; the id is cached in a thread_local variable.
145*9356374aSAndroid Build Coastguard Worker // This id is assigned based on the arrival-order of the thread to the
146*9356374aSAndroid Build Coastguard Worker // GetPoolID call; this has no binary, CL, or runtime stability because
147*9356374aSAndroid Build Coastguard Worker // on subsequent runs the order within the same program may be significantly
148*9356374aSAndroid Build Coastguard Worker // different. However, as other thread IDs are not assigned sequentially,
149*9356374aSAndroid Build Coastguard Worker // this is not expected to matter.
GetPoolID()150*9356374aSAndroid Build Coastguard Worker size_t GetPoolID() {
151*9356374aSAndroid Build Coastguard Worker static_assert(kPoolSize >= 1,
152*9356374aSAndroid Build Coastguard Worker "At least one urbg instance is required for PoolURBG");
153*9356374aSAndroid Build Coastguard Worker
154*9356374aSAndroid Build Coastguard Worker ABSL_CONST_INIT static std::atomic<uint64_t> sequence{0};
155*9356374aSAndroid Build Coastguard Worker
156*9356374aSAndroid Build Coastguard Worker #ifdef ABSL_HAVE_THREAD_LOCAL
157*9356374aSAndroid Build Coastguard Worker static thread_local size_t my_pool_id = kPoolSize;
158*9356374aSAndroid Build Coastguard Worker if (ABSL_PREDICT_FALSE(my_pool_id == kPoolSize)) {
159*9356374aSAndroid Build Coastguard Worker my_pool_id = (sequence++ % kPoolSize);
160*9356374aSAndroid Build Coastguard Worker }
161*9356374aSAndroid Build Coastguard Worker return my_pool_id;
162*9356374aSAndroid Build Coastguard Worker #else
163*9356374aSAndroid Build Coastguard Worker static pthread_key_t tid_key = [] {
164*9356374aSAndroid Build Coastguard Worker pthread_key_t tmp_key;
165*9356374aSAndroid Build Coastguard Worker int err = pthread_key_create(&tmp_key, nullptr);
166*9356374aSAndroid Build Coastguard Worker if (err) {
167*9356374aSAndroid Build Coastguard Worker ABSL_RAW_LOG(FATAL, "pthread_key_create failed with %d", err);
168*9356374aSAndroid Build Coastguard Worker }
169*9356374aSAndroid Build Coastguard Worker return tmp_key;
170*9356374aSAndroid Build Coastguard Worker }();
171*9356374aSAndroid Build Coastguard Worker
172*9356374aSAndroid Build Coastguard Worker // Store the value in the pthread_{get/set}specific. However an uninitialized
173*9356374aSAndroid Build Coastguard Worker // value is 0, so add +1 to distinguish from the null value.
174*9356374aSAndroid Build Coastguard Worker uintptr_t my_pool_id =
175*9356374aSAndroid Build Coastguard Worker reinterpret_cast<uintptr_t>(pthread_getspecific(tid_key));
176*9356374aSAndroid Build Coastguard Worker if (ABSL_PREDICT_FALSE(my_pool_id == 0)) {
177*9356374aSAndroid Build Coastguard Worker // No allocated ID, allocate the next value, cache it, and return.
178*9356374aSAndroid Build Coastguard Worker my_pool_id = (sequence++ % kPoolSize) + 1;
179*9356374aSAndroid Build Coastguard Worker int err = pthread_setspecific(tid_key, reinterpret_cast<void*>(my_pool_id));
180*9356374aSAndroid Build Coastguard Worker if (err) {
181*9356374aSAndroid Build Coastguard Worker ABSL_RAW_LOG(FATAL, "pthread_setspecific failed with %d", err);
182*9356374aSAndroid Build Coastguard Worker }
183*9356374aSAndroid Build Coastguard Worker }
184*9356374aSAndroid Build Coastguard Worker return my_pool_id - 1;
185*9356374aSAndroid Build Coastguard Worker #endif
186*9356374aSAndroid Build Coastguard Worker }
187*9356374aSAndroid Build Coastguard Worker
188*9356374aSAndroid Build Coastguard Worker // Allocate a RandenPoolEntry with at least 32-byte alignment, which is required
189*9356374aSAndroid Build Coastguard Worker // by ARM platform code.
PoolAlignedAlloc()190*9356374aSAndroid Build Coastguard Worker RandenPoolEntry* PoolAlignedAlloc() {
191*9356374aSAndroid Build Coastguard Worker constexpr size_t kAlignment =
192*9356374aSAndroid Build Coastguard Worker ABSL_CACHELINE_SIZE > 32 ? ABSL_CACHELINE_SIZE : 32;
193*9356374aSAndroid Build Coastguard Worker
194*9356374aSAndroid Build Coastguard Worker // Not all the platforms that we build for have std::aligned_alloc, however
195*9356374aSAndroid Build Coastguard Worker // since we never free these objects, we can over allocate and munge the
196*9356374aSAndroid Build Coastguard Worker // pointers to the correct alignment.
197*9356374aSAndroid Build Coastguard Worker uintptr_t x = reinterpret_cast<uintptr_t>(
198*9356374aSAndroid Build Coastguard Worker new char[sizeof(RandenPoolEntry) + kAlignment]);
199*9356374aSAndroid Build Coastguard Worker auto y = x % kAlignment;
200*9356374aSAndroid Build Coastguard Worker void* aligned = reinterpret_cast<void*>(y == 0 ? x : (x + kAlignment - y));
201*9356374aSAndroid Build Coastguard Worker return new (aligned) RandenPoolEntry();
202*9356374aSAndroid Build Coastguard Worker }
203*9356374aSAndroid Build Coastguard Worker
204*9356374aSAndroid Build Coastguard Worker // Allocate and initialize kPoolSize objects of type RandenPoolEntry.
205*9356374aSAndroid Build Coastguard Worker //
206*9356374aSAndroid Build Coastguard Worker // The initialization strategy is to initialize one object directly from
207*9356374aSAndroid Build Coastguard Worker // OS entropy, then to use that object to seed all of the individual
208*9356374aSAndroid Build Coastguard Worker // pool instances.
InitPoolURBG()209*9356374aSAndroid Build Coastguard Worker void InitPoolURBG() {
210*9356374aSAndroid Build Coastguard Worker static constexpr size_t kSeedSize =
211*9356374aSAndroid Build Coastguard Worker RandenTraits::kStateBytes / sizeof(uint32_t);
212*9356374aSAndroid Build Coastguard Worker // Read the seed data from OS entropy once.
213*9356374aSAndroid Build Coastguard Worker uint32_t seed_material[kPoolSize * kSeedSize];
214*9356374aSAndroid Build Coastguard Worker if (!random_internal::ReadSeedMaterialFromOSEntropy(
215*9356374aSAndroid Build Coastguard Worker absl::MakeSpan(seed_material))) {
216*9356374aSAndroid Build Coastguard Worker random_internal::ThrowSeedGenException();
217*9356374aSAndroid Build Coastguard Worker }
218*9356374aSAndroid Build Coastguard Worker for (size_t i = 0; i < kPoolSize; i++) {
219*9356374aSAndroid Build Coastguard Worker shared_pools[i] = PoolAlignedAlloc();
220*9356374aSAndroid Build Coastguard Worker shared_pools[i]->Init(
221*9356374aSAndroid Build Coastguard Worker absl::MakeSpan(&seed_material[i * kSeedSize], kSeedSize));
222*9356374aSAndroid Build Coastguard Worker }
223*9356374aSAndroid Build Coastguard Worker }
224*9356374aSAndroid Build Coastguard Worker
225*9356374aSAndroid Build Coastguard Worker // Returns the pool entry for the current thread.
GetPoolForCurrentThread()226*9356374aSAndroid Build Coastguard Worker RandenPoolEntry* GetPoolForCurrentThread() {
227*9356374aSAndroid Build Coastguard Worker absl::call_once(pool_once, InitPoolURBG);
228*9356374aSAndroid Build Coastguard Worker return shared_pools[GetPoolID()];
229*9356374aSAndroid Build Coastguard Worker }
230*9356374aSAndroid Build Coastguard Worker
231*9356374aSAndroid Build Coastguard Worker } // namespace
232*9356374aSAndroid Build Coastguard Worker
233*9356374aSAndroid Build Coastguard Worker template <typename T>
Generate()234*9356374aSAndroid Build Coastguard Worker typename RandenPool<T>::result_type RandenPool<T>::Generate() {
235*9356374aSAndroid Build Coastguard Worker auto* pool = GetPoolForCurrentThread();
236*9356374aSAndroid Build Coastguard Worker return pool->Generate<T>();
237*9356374aSAndroid Build Coastguard Worker }
238*9356374aSAndroid Build Coastguard Worker
239*9356374aSAndroid Build Coastguard Worker template <typename T>
Fill(absl::Span<result_type> data)240*9356374aSAndroid Build Coastguard Worker void RandenPool<T>::Fill(absl::Span<result_type> data) {
241*9356374aSAndroid Build Coastguard Worker auto* pool = GetPoolForCurrentThread();
242*9356374aSAndroid Build Coastguard Worker pool->Fill(reinterpret_cast<uint8_t*>(data.data()),
243*9356374aSAndroid Build Coastguard Worker data.size() * sizeof(result_type));
244*9356374aSAndroid Build Coastguard Worker }
245*9356374aSAndroid Build Coastguard Worker
246*9356374aSAndroid Build Coastguard Worker template class RandenPool<uint8_t>;
247*9356374aSAndroid Build Coastguard Worker template class RandenPool<uint16_t>;
248*9356374aSAndroid Build Coastguard Worker template class RandenPool<uint32_t>;
249*9356374aSAndroid Build Coastguard Worker template class RandenPool<uint64_t>;
250*9356374aSAndroid Build Coastguard Worker
251*9356374aSAndroid Build Coastguard Worker } // namespace random_internal
252*9356374aSAndroid Build Coastguard Worker ABSL_NAMESPACE_END
253*9356374aSAndroid Build Coastguard Worker } // namespace absl
254