xref: /freebsd-14.2/lib/libc/stdlib/random.3 (revision 12a68650)
158f0484fSRodney W. Grimes.\" Copyright (c) 1983, 1991, 1993
258f0484fSRodney W. Grimes.\"	The Regents of the University of California.  All rights reserved.
358f0484fSRodney W. Grimes.\"
458f0484fSRodney W. Grimes.\" Redistribution and use in source and binary forms, with or without
558f0484fSRodney W. Grimes.\" modification, are permitted provided that the following conditions
658f0484fSRodney W. Grimes.\" are met:
758f0484fSRodney W. Grimes.\" 1. Redistributions of source code must retain the above copyright
858f0484fSRodney W. Grimes.\"    notice, this list of conditions and the following disclaimer.
958f0484fSRodney W. Grimes.\" 2. Redistributions in binary form must reproduce the above copyright
1058f0484fSRodney W. Grimes.\"    notice, this list of conditions and the following disclaimer in the
1158f0484fSRodney W. Grimes.\"    documentation and/or other materials provided with the distribution.
1258f0484fSRodney W. Grimes.\" 4. Neither the name of the University nor the names of its contributors
1358f0484fSRodney W. Grimes.\"    may be used to endorse or promote products derived from this software
1458f0484fSRodney W. Grimes.\"    without specific prior written permission.
1558f0484fSRodney W. Grimes.\"
1658f0484fSRodney W. Grimes.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
1758f0484fSRodney W. Grimes.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
1858f0484fSRodney W. Grimes.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
1958f0484fSRodney W. Grimes.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
2058f0484fSRodney W. Grimes.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2158f0484fSRodney W. Grimes.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2258f0484fSRodney W. Grimes.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
2358f0484fSRodney W. Grimes.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
2458f0484fSRodney W. Grimes.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
2558f0484fSRodney W. Grimes.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
2658f0484fSRodney W. Grimes.\" SUCH DAMAGE.
2758f0484fSRodney W. Grimes.\"
2858f0484fSRodney W. Grimes.\"     @(#)random.3	8.1 (Berkeley) 6/4/93
297f3dea24SPeter Wemm.\" $FreeBSD$
3058f0484fSRodney W. Grimes.\"
31*12a68650SXin LI.Dd April 2, 2013
3258f0484fSRodney W. Grimes.Dt RANDOM 3
33a307d598SRuslan Ermilov.Os
3458f0484fSRodney W. Grimes.Sh NAME
3558f0484fSRodney W. Grimes.Nm random ,
3658f0484fSRodney W. Grimes.Nm srandom ,
377b0b1b2fSAndrey A. Chernov.Nm srandomdev ,
3858f0484fSRodney W. Grimes.Nm initstate ,
3958f0484fSRodney W. Grimes.Nm setstate
4058f0484fSRodney W. Grimes.Nd better random number generator; routines for changing generators
4125bb73e0SAlexey Zelkin.Sh LIBRARY
4225bb73e0SAlexey Zelkin.Lb libc
4358f0484fSRodney W. Grimes.Sh SYNOPSIS
448aefde06SJeroen Ruigrok van der Werven.In stdlib.h
4558f0484fSRodney W. Grimes.Ft long
4658f0484fSRodney W. Grimes.Fn random void
4758f0484fSRodney W. Grimes.Ft void
4894fa7afdSAndrey A. Chernov.Fn srandom "unsigned long seed"
4996c31b26SAndrey A. Chernov.Ft void
507b0b1b2fSAndrey A. Chernov.Fn srandomdev void
5158f0484fSRodney W. Grimes.Ft char *
5294fa7afdSAndrey A. Chernov.Fn initstate "unsigned long seed" "char *state" "long n"
5358f0484fSRodney W. Grimes.Ft char *
5458f0484fSRodney W. Grimes.Fn setstate "char *state"
5558f0484fSRodney W. Grimes.Sh DESCRIPTION
56edab57e0SDag-Erling Smørgrav.Bf -symbolic
57edab57e0SDag-Erling SmørgravThe functions described in this manual page are not cryptographically
58edab57e0SDag-Erling Smørgravsecure.
59edab57e0SDag-Erling SmørgravCryptographic applications should use
60edab57e0SDag-Erling Smørgrav.Xr arc4random 3
61edab57e0SDag-Erling Smørgravinstead.
62edab57e0SDag-Erling Smørgrav.Ef
63edab57e0SDag-Erling Smørgrav.Pp
6458f0484fSRodney W. GrimesThe
6558f0484fSRodney W. Grimes.Fn random
6658f0484fSRodney W. Grimesfunction
6758f0484fSRodney W. Grimesuses a non-linear additive feedback random number generator employing a
6858f0484fSRodney W. Grimesdefault table of size 31 long integers to return successive pseudo-random
6958f0484fSRodney W. Grimesnumbers in the range from 0 to
7058f0484fSRodney W. Grimes.if t 2\u\s731\s10\d\(mi1.
7158f0484fSRodney W. Grimes.if n (2**31)\(mi1.
7258f0484fSRodney W. GrimesThe period of this random number generator is very large, approximately
7358f0484fSRodney W. Grimes.if t 16\(mu(2\u\s731\s10\d\(mi1).
7458f0484fSRodney W. Grimes.if n 16*((2**31)\(mi1).
7558f0484fSRodney W. Grimes.Pp
7658f0484fSRodney W. GrimesThe
77064f0074SMike Pritchard.Fn random
78064f0074SMike Pritchardand
79064f0074SMike Pritchard.Fn srandom
80064f0074SMike Pritchardfunctions have (almost) the same calling sequence and initialization properties as the
81064f0074SMike Pritchard.Xr rand 3
82064f0074SMike Pritchardand
83064f0074SMike Pritchard.Xr srand 3
84064f0074SMike Pritchardfunctions.
8558f0484fSRodney W. GrimesThe difference is that
86064f0074SMike Pritchard.Xr rand 3
8758f0484fSRodney W. Grimesproduces a much less random sequence \(em in fact, the low dozen bits
881a0a9345SRuslan Ermilovgenerated by rand go through a cyclic pattern.
891a0a9345SRuslan ErmilovAll the bits generated by
9058f0484fSRodney W. Grimes.Fn random
911a0a9345SRuslan Ermilovare usable.
921a0a9345SRuslan ErmilovFor example,
9358f0484fSRodney W. Grimes.Sq Li random()&01
9458f0484fSRodney W. Grimeswill produce a random binary
9558f0484fSRodney W. Grimesvalue.
9658f0484fSRodney W. Grimes.Pp
9740f8b70dSAndrey A. ChernovLike
9858f0484fSRodney W. Grimes.Xr rand 3 ,
9958f0484fSRodney W. Grimes.Fn random
10058f0484fSRodney W. Grimeswill by default produce a sequence of numbers that can be duplicated
10158f0484fSRodney W. Grimesby calling
10258f0484fSRodney W. Grimes.Fn srandom
10358f0484fSRodney W. Grimeswith
10458f0484fSRodney W. Grimes.Ql 1
10558f0484fSRodney W. Grimesas the seed.
10658f0484fSRodney W. Grimes.Pp
10758f0484fSRodney W. GrimesThe
1087b0b1b2fSAndrey A. Chernov.Fn srandomdev
109*12a68650SXin LIroutine initializes a state array using
110*12a68650SXin LIpseudo-random numbers obtained from the kernel.
1117b0b1b2fSAndrey A. ChernovNote that this particular seeding
1127b0b1b2fSAndrey A. Chernovprocedure can generate states which are impossible to reproduce by
1137b0b1b2fSAndrey A. Chernovcalling
1147b0b1b2fSAndrey A. Chernov.Fn srandom
1157b0b1b2fSAndrey A. Chernovwith any value, since the succeeding terms in the
1167b0b1b2fSAndrey A. Chernovstate buffer are no longer derived from the LC algorithm applied to
1177b0b1b2fSAndrey A. Chernova fixed seed.
1187b0b1b2fSAndrey A. Chernov.Pp
1197b0b1b2fSAndrey A. ChernovThe
12058f0484fSRodney W. Grimes.Fn initstate
12158f0484fSRodney W. Grimesroutine allows a state array, passed in as an argument, to be initialized
1221a0a9345SRuslan Ermilovfor future use.
1231a0a9345SRuslan ErmilovThe size of the state array (in bytes) is used by
12458f0484fSRodney W. Grimes.Fn initstate
12558f0484fSRodney W. Grimesto decide how sophisticated a random number generator it should use \(em the
12658f0484fSRodney W. Grimesmore state, the better the random numbers will be.
12758f0484fSRodney W. Grimes(Current "optimal" values for the amount of state information are
12858f0484fSRodney W. Grimes8, 32, 64, 128, and 256 bytes; other amounts will be rounded down to
1291a0a9345SRuslan Ermilovthe nearest known amount.
1301a0a9345SRuslan ErmilovUsing less than 8 bytes will cause an error.)
13158f0484fSRodney W. GrimesThe seed for the initialization (which specifies a starting point for
13258f0484fSRodney W. Grimesthe random number sequence, and provides for restarting at the same
13358f0484fSRodney W. Grimespoint) is also an argument.
13458f0484fSRodney W. GrimesThe
13558f0484fSRodney W. Grimes.Fn initstate
13658f0484fSRodney W. Grimesfunction
13758f0484fSRodney W. Grimesreturns a pointer to the previous state information array.
13858f0484fSRodney W. Grimes.Pp
13958f0484fSRodney W. GrimesOnce a state has been initialized, the
14058f0484fSRodney W. Grimes.Fn setstate
14158f0484fSRodney W. Grimesroutine provides for rapid switching between states.
14258f0484fSRodney W. GrimesThe
14358f0484fSRodney W. Grimes.Fn setstate
14458f0484fSRodney W. Grimesfunction
14558f0484fSRodney W. Grimesreturns a pointer to the previous state array; its
14658f0484fSRodney W. Grimesargument state array is used for further random number generation
14758f0484fSRodney W. Grimesuntil the next call to
14858f0484fSRodney W. Grimes.Fn initstate
14958f0484fSRodney W. Grimesor
15058f0484fSRodney W. Grimes.Fn setstate .
15158f0484fSRodney W. Grimes.Pp
15258f0484fSRodney W. GrimesOnce a state array has been initialized, it may be restarted at a
15358f0484fSRodney W. Grimesdifferent point either by calling
15458f0484fSRodney W. Grimes.Fn initstate
15558f0484fSRodney W. Grimes(with the desired seed, the state array, and its size) or by calling
15658f0484fSRodney W. Grimesboth
15758f0484fSRodney W. Grimes.Fn setstate
15858f0484fSRodney W. Grimes(with the state array) and
15958f0484fSRodney W. Grimes.Fn srandom
16058f0484fSRodney W. Grimes(with the desired seed).
16158f0484fSRodney W. GrimesThe advantage of calling both
16258f0484fSRodney W. Grimes.Fn setstate
16358f0484fSRodney W. Grimesand
16458f0484fSRodney W. Grimes.Fn srandom
16558f0484fSRodney W. Grimesis that the size of the state array does not have to be remembered after
16658f0484fSRodney W. Grimesit is initialized.
16758f0484fSRodney W. Grimes.Pp
16858f0484fSRodney W. GrimesWith 256 bytes of state information, the period of the random number
16958f0484fSRodney W. Grimesgenerator is greater than
17058f0484fSRodney W. Grimes.if t 2\u\s769\s10\d,
17158f0484fSRodney W. Grimes.if n 2**69
17258f0484fSRodney W. Grimeswhich should be sufficient for most purposes.
17358f0484fSRodney W. Grimes.Sh DIAGNOSTICS
17458f0484fSRodney W. GrimesIf
17558f0484fSRodney W. Grimes.Fn initstate
17658f0484fSRodney W. Grimesis called with less than 8 bytes of state information, or if
17758f0484fSRodney W. Grimes.Fn setstate
17858f0484fSRodney W. Grimesdetects that the state information has been garbled, error
17958f0484fSRodney W. Grimesmessages are printed on the standard error output.
18058f0484fSRodney W. Grimes.Sh SEE ALSO
181e02cc8e4SDavid Schultz.Xr arc4random 3 ,
182866dcc94SKonstantin Belousov.Xr lrand48 3 ,
18340f8b70dSAndrey A. Chernov.Xr rand 3 ,
184df49b8e2SDima Dorfman.Xr random 4
18558f0484fSRodney W. Grimes.Sh HISTORY
18658f0484fSRodney W. GrimesThese
18758f0484fSRodney W. Grimesfunctions appeared in
18858f0484fSRodney W. Grimes.Bx 4.2 .
18924a0682cSRuslan Ermilov.Sh AUTHORS
19024a0682cSRuslan Ermilov.An Earl T. Cohen
19158f0484fSRodney W. Grimes.Sh BUGS
19258f0484fSRodney W. GrimesAbout 2/3 the speed of
19358f0484fSRodney W. Grimes.Xr rand 3 .
19440f8b70dSAndrey A. Chernov.Pp
19540f8b70dSAndrey A. ChernovThe historical implementation used to have a very weak seeding; the
196a080f578SAndrey A. Chernovrandom sequence did not vary much with the seed.
19740f8b70dSAndrey A. ChernovThe current implementation employs a better pseudo-random number
19840f8b70dSAndrey A. Chernovgenerator for the initial state calculation.
199