catacomb/pwsafe.py: Hack around the difference in octal literal syntax.

[catacomb-python] / rand.c

/* -*-c-*-
 *
 * Random-number generators
 *
 * (c) 2004 Straylight/Edgeware
 */

/*----- Licensing notice --------------------------------------------------*
 *
 * This file is part of the Python interface to Catacomb.
 *
 * Catacomb/Python is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * Catacomb/Python is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with Catacomb/Python; if not, write to the Free Software Foundation,
 * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
 */

/*----- Header files ------------------------------------------------------*/

#include "catacomb-python.h"
PUBLIC_SYMBOLS;
#include "algorithms.h"
PRIVATE_SYMBOLS;

/*----- Main code ---------------------------------------------------------*/

PyTypeObject *grand_pytype;
static PyTypeObject *truerand_pytype;
static PyTypeObject *lcrand_pytype, *fibrand_pytype;
static PyTypeObject *dsarand_pytype, *bbs_pytype, *bbspriv_pytype;
static PyTypeObject *sslprf_pytype, *tlsdx_pytype, *tlsprf_pytype;
PyObject *rand_pyobj;

static PyObject *gccrands_dict;

static PyObject *grand_dopywrap(PyTypeObject *ty, grand *r, unsigned f)
{
  grand_pyobj *g;

  g = (grand_pyobj *)ty->tp_alloc(ty, 0);
  g->r = r;
  g->f = f;
  return ((PyObject *)g);
}

PyObject *grand_pywrap(grand *r, unsigned f)
{
  PyTypeObject *ty = grand_pytype;
  PyObject *ob;

  if (STRCMP(r->ops->name, ==, "rand")) ty = truerand_pytype;
  else if (STRCMP(r->ops->name, ==, "lcrand")) ty = lcrand_pytype;
  else if (STRCMP(r->ops->name, ==, "fibrand")) ty = fibrand_pytype;
  else if (STRCMP(r->ops->name, ==, "dsarand")) ty = dsarand_pytype;
  else if (STRCMP(r->ops->name, ==, "bbs")) ty = bbs_pytype;
  else if (STRCMP(r->ops->name, ==, "sslprf")) ty = sslprf_pytype;
  else if (STRCMP(r->ops->name, ==, "tlsdx")) ty = tlsdx_pytype;
  else if (STRCMP(r->ops->name, ==, "tlsprf")) ty = tlsprf_pytype;
  else if ((ob = PyMapping_GetItemString
		   (gccrands_dict, (/*unconst*/ char *)r->ops->name)) != 0)
    ty = (PyTypeObject *)ob;
  return (grand_dopywrap(ty, r, f));
}

CONVFUNC(grand, grand *, GRAND_R)

static int grand_check(PyObject *me)
{
  if (!GRAND_R(me)) VALERR("random generator object is no longer valid");
  return (0);
end:
  return (-1);
}

static PyObject *grmeth_byte(PyObject *me)
{
  if (grand_check(me)) return (0);
  return (PyInt_FromLong(grand_byte(GRAND_R(me))));
}

static PyObject *grmeth_word(PyObject *me)
{
  if (grand_check(me)) return (0);
  return (getulong(grand_word(GRAND_R(me))));
}

static PyObject *grmeth_range(PyObject *me, PyObject *arg)
{
  PyObject *m;
  mp *x = 0;
  mp *y = 0;

  if (!PyArg_ParseTuple(arg, "O:range", &m)) return (0);
  if (grand_check(me)) return (0);
  if (PyInt_Check(m)) {
    long mm = PyInt_AS_LONG(m);
    if (mm <= 0)
      goto notpos;
    if (mm <= 0xffffffff)
      return (PyInt_FromLong(grand_range(GRAND_R(me), mm)));
  }
  if ((x = getmp(m)) == 0)
    goto end;
  if (!MP_POSP(x))
    goto notpos;
  y = mprand_range(MP_NEW, x, GRAND_R(me), 0);
  MP_DROP(x);
  return (mp_pywrap(y));
notpos:
  VALERR("range must be strictly positive");
end:
  if (x) MP_DROP(x);
  return (0);
}

static PyObject *grmeth_mp(PyObject *me, PyObject *arg, PyObject *kw)
{
  size_t l;
  mpw o = 0;
  static const char *const kwlist[] = { "bits", "or", 0 };

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&|O&:mp", KWLIST,
				   convszt, &l, convmpw, &o))
    goto end;
  if (grand_check(me)) return (0);
  if (l < MPW_BITS && (o >> l)) VALERR("or mask too large");
  return (mp_pywrap(mprand(MP_NEW, l, GRAND_R(me), o)));
end:
  return (0);
}

static PyObject *grmeth_block(PyObject *me, PyObject *arg)
{
  unsigned long n;
  PyObject *rc = 0;

  if (!PyArg_ParseTuple(arg, "O&:block", convulong, &n)) goto end;
  if (grand_check(me)) return (0);
  rc = bytestring_pywrap(0, n);
  grand_fill(GRAND_R(me), BIN_PTR(rc), n);
end:
  return (rc);
}

static int checkop(grand *r, unsigned op, const char *what)
{
  if (r->ops->misc(r, GRAND_CHECK, op)) return (0);
  PyErr_Format(PyExc_TypeError, "operation %s not supported", what);
  return (-1);
}

static PyObject *grmeth_seedint(PyObject *me, PyObject *arg)
{
  int i;
  grand *r = GRAND_R(me);
  if (!PyArg_ParseTuple(arg, "i:seedint", &i) ||
      grand_check(me) || checkop(r, GRAND_SEEDINT, "seedint"))
    goto end;
  r->ops->misc(r, GRAND_SEEDINT, i);
  RETURN_ME;
end:
  return (0);
}

static PyObject *grmeth_seedword(PyObject *me, PyObject *arg)
{
  uint32 u;
  grand *r = GRAND_R(me);
  if (!PyArg_ParseTuple(arg, "O&:seedword", convu32, &u) ||
      grand_check(me) || checkop(r, GRAND_SEEDUINT32, "seedword"))
    goto end;
  r->ops->misc(r, GRAND_SEEDUINT32, u);
  RETURN_ME;
end:
  return (0);
}

static PyObject *grmeth_seedblock(PyObject *me, PyObject *arg)
{
  struct bin in;
  grand *r = GRAND_R(me);
  if (!PyArg_ParseTuple(arg, "O&:seedblock", convbin, &in) ||
      grand_check(me) || checkop(r, GRAND_SEEDBLOCK, "seedblock"))
    goto end;
  r->ops->misc(r, GRAND_SEEDBLOCK, in.p, (size_t)in.sz);
  RETURN_ME;
end:
  return (0);
}

static PyObject *grmeth_seedmp(PyObject *me, PyObject *arg)
{
  PyObject *x;
  mp *xx;
  grand *r = GRAND_R(me);
  if (!PyArg_ParseTuple(arg, "O:seedmp", &x) ||
      grand_check(me) || checkop(r, GRAND_SEEDMP, "seedmp") ||
      (xx = getmp(x)) == 0)
    goto end;
  r->ops->misc(r, GRAND_SEEDMP, xx);
  MP_DROP(xx);
  RETURN_ME;
end:
  return (0);
}

static PyObject *grmeth_seedrand(PyObject *me, PyObject *arg, PyObject *kw)
{
  static const char *const kwlist[] = { "rng", 0 };
  grand *r = GRAND_R(me);
  grand *rr = &rand_global;
  if (!PyArg_ParseTupleAndKeywords(arg, kw, "|O&:seedrand", KWLIST,
				   convgrand, &rr) ||
      grand_check(me) || checkop(r, GRAND_SEEDRAND, "seedrand"))
    goto end;
  r->ops->misc(r, GRAND_SEEDRAND, rr);
  RETURN_ME;
end:
  return (0);
}

static PyObject *grmeth_mask(PyObject *me, PyObject *arg)
{
  grand *r = GRAND_R(me);
  struct bin in;
  const octet *p; size_t n;
  octet *q;
  PyObject *rc;

  if (!PyArg_ParseTuple(arg, "O&:mask", convbin, &in)) return (0);
  if (grand_check(me)) return (0);
  rc = bytestring_pywrap(0, in.sz);
  q = (octet *)BIN_PTR(rc);
  GR_FILL(r, q, in.sz);
  p = in.p; n = in.sz; while (n--) *q++ ^= *p++;
  return (rc);
}

static void grand_pydealloc(PyObject *me)
{
  grand_pyobj *g = (grand_pyobj *)me;
  if ((g->f & f_freeme) && g->r) GR_DESTROY(g->r);
  FREEOBJ(me);
}

static PyObject *grget_name(PyObject *me, void *hunoz)
  { return (grand_check(me) ? 0 : TEXT_FROMSTR(GRAND_R(me)->ops->name)); }

static PyObject *grget_cryptop(PyObject *me, void *hunoz)
  { return (grand_check(me) ? 0 : getbool(GRAND_R(me)->ops->f & GRAND_CRYPTO)); }

static const PyGetSetDef grand_pygetset[] = {
#define GETSETNAME(op, name) gr##op##_##name
  GET	(name,		"R.name -> name of this kind of generator")
  GET	(cryptop,	"R.cryptop -> flag: cryptographically strong?")
#undef GETSETNAME
  { 0 }
};

static const PyMethodDef grand_pymethods[] = {
#define METHNAME(name) grmeth_##name
  NAMETH(byte,		"R.byte() -> BYTE")
  NAMETH(word,		"R.word() -> WORD")
  METH	(block,		"R.block(N) -> STRING")
  KWMETH(mp,		"R.mp(bits, [or = 0]) -> MP")
  METH	(range,		"R.range(MAX) -> INT")
  METH	(mask,		"R.mask(STR) -> STR")
  METH	(seedint,	"R.seedint(I)")
  METH	(seedword,	"R.seedword(I)")
  METH	(seedblock,	"R.seedblock(BYTES)")
  METH	(seedmp,	"R.seedmp(X)")
  KWMETH(seedrand,	"R.seedrand(RR)")
#undef METHNAME
  { 0 }
};

static const PyTypeObject grand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "GRand",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "Generic random number source.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  PYMETHODS(grand),			/* @tp_methods@ */
  0,					/* @tp_members@ */
  PYGETSET(grand),			/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  abstract_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

static PyObject *lcrand_pynew(PyTypeObject *me, PyObject *arg, PyObject *kw)
{
  uint32 n = 0;
  static const char *const kwlist[] = { "seed", 0 };
  if (!PyArg_ParseTupleAndKeywords(arg, kw, "|O&:new", KWLIST, convu32, &n))
    return (0);
  return (grand_dopywrap(lcrand_pytype, lcrand_create(n), f_freeme));
}

static const PyTypeObject lcrand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "LCRand",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "LCRand([seed = 0]): linear congruential generator.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  0,					/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  lcrand_pynew,				/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

static PyObject *fibrand_pynew(PyTypeObject *me, PyObject *arg, PyObject *kw)
{
  uint32 n = 0;
  static const char *const kwlist[] = { "seed", 0 };
  if (!PyArg_ParseTupleAndKeywords(arg, kw, "|O&:new", KWLIST, convu32, &n))
    return (0);
  return (grand_dopywrap(fibrand_pytype, fibrand_create(n), f_freeme));
}

static const PyTypeObject fibrand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "FibRand",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "FibRand([seed = 0]): Fibonacci generator.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  0,					/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  fibrand_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

/*----- True random generator ---------------------------------------------*/

static PyObject *trmeth_gate(PyObject *me)
  { grand *r = GRAND_R(me); r->ops->misc(GRAND_R(me), RAND_GATE); RETURN_ME; }

static PyObject *trmeth_stretch(PyObject *me)
  { grand *r = GRAND_R(me); r->ops->misc(r, RAND_STRETCH); RETURN_ME; }

static PyObject *trmeth_add(PyObject *me, PyObject *arg)
{
  grand *r = GRAND_R(me);
  struct bin in; unsigned goodbits;
  if (!PyArg_ParseTuple(arg, "O&O&:add", convbin, &in, convuint, &goodbits))
    return (0);
  r->ops->misc(r, RAND_ADD, in.p, (size_t)in.sz, goodbits);
  RETURN_ME;
}

static PyObject *trmeth_key(PyObject *me, PyObject *arg)
{
  grand *r = GRAND_R(me);
  struct bin k;
  if (!PyArg_ParseTuple(arg, "O&:key", convbin, &k)) return (0);
  r->ops->misc(r, RAND_KEY, k.p, (size_t)k.sz);
  RETURN_ME;
}

static PyObject *trmeth_seed(PyObject *me, PyObject *arg)
{
  grand *r = GRAND_R(me);
  unsigned u;
  if (!PyArg_ParseTuple(arg, "O&:seed", convuint, &u)) return (0);
  if (u > RAND_IBITS) VALERR("pointlessly large");
  r->ops->misc(r, RAND_SEED, u);
  RETURN_ME;
end:
  return (0);
}

static PyObject *trmeth_timer(PyObject *me)
  { grand *r = GRAND_R(me); r->ops->misc(r, RAND_TIMER); RETURN_ME; }

static PyObject *truerand_pynew(PyTypeObject *ty,
				PyObject *arg, PyObject *kw)
{
  static const char *const kwlist[] = { 0 };
  grand *r;
  PyObject *rc = 0;
  if (!PyArg_ParseTupleAndKeywords(arg, kw, ":new", KWLIST)) goto end;
  r = rand_create();
  r->ops->misc(r, RAND_NOISESRC, &noise_source);
  r->ops->misc(r, RAND_SEED, 160);
  rc = grand_dopywrap(ty, r, f_freeme);
end:
  return (rc);
}

static const PyMethodDef truerand_pymethods[] = {
#define METHNAME(name) trmeth_##name
  NAMETH(gate,		"R.gate()")
  NAMETH(stretch,	"R.stretch()")
  METH	(key,		"R.key(BYTES)")
  METH	(seed,		"R.seed(NBITS)")
  METH	(add,		"R.add(BYTES, GOODBITS")
  NAMETH(timer,		"R.timer()")
#undef METHNAME
  { 0 }
};

static PyObject *trget_goodbits(PyObject *me, void *hunoz)
{
  grand *r = GRAND_R(me);
  return (PyInt_FromLong(r->ops->misc(r, RAND_GOODBITS)));
}

static const PyGetSetDef truerand_pygetset[] = {
#define GETSETNAME(op, name) tr##op##_##name
  GET	(goodbits,	"R.goodbits -> good bits of entropy remaining")
#undef GETSETNAME
  { 0 }
};

static const PyTypeObject truerand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "TrueRand",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "TrueRand(): true random number source.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  PYMETHODS(truerand),			/* @tp_methods@ */
  0,					/* @tp_members@ */
  PYGETSET(truerand),			/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  truerand_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

/*----- Generators from symmetric encryption algorithms -------------------*/

static PyTypeObject *gccrand_pytype, *gcrand_pytype, *gclatinrand_pytype;

typedef grand *gcrand_func(const void *, size_t sz);
typedef grand *gcirand_func(const void *, size_t sz, uint32);
typedef grand *gcnrand_func(const void *, size_t sz, const void *);
typedef grand *gcshakerand_func(const void *, size_t,
				const void *, size_t,
				const void *, size_t);
typedef grand *gcshafuncrand_func(const void *, size_t,
				  const void *, size_t);
typedef grand *gckmacrand_func(const void *, size_t, const void *, size_t);
typedef struct gccrand_info {
  const char *name;
  const octet *keysz;
  unsigned f;
  size_t noncesz;
  gcrand_func *func;
} gccrand_info;

#define RNGF_MASK 255u

enum {
  RNG_PLAIN = 0,
  RNG_SEAL,
  RNG_LATIN,
  RNG_SHAKE,
  RNG_KMAC
};

typedef struct gccrand_pyobj {
  PyHeapTypeObject ty;
  const gccrand_info *info;
} gccrand_pyobj;
#define GCCRAND_INFO(o) (((gccrand_pyobj *)(o))->info)

#define GCCRAND_DEF(name, ksz, func, f, nsz)				\
  static const gccrand_info func##_info =				\
    { name, ksz, f, nsz, (gcrand_func *)func };
RNGS(GCCRAND_DEF)

static const gccrand_info *const gcrandtab[] = {
#define GCCRAND_ENTRY(name, ksz, func, f, nsz) &func##_info,
  RNGS(GCCRAND_ENTRY)
  0
};

static PyObject *gcrand_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  const gccrand_info *info = GCCRAND_INFO(ty);
  static const char *const kwlist[] = { "key", 0 };
  struct bin k;

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&:new", KWLIST,  convbin, &k))
    goto end;
  if (keysz(k.sz, info->keysz) != k.sz) VALERR("bad key length");
  return (grand_dopywrap(ty, info->func(k.p, k.sz), f_freeme));
end:
  return (0);
}

static PyObject *gcirand_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  const gccrand_info *info = GCCRAND_INFO(ty);
  uint32 i = 0;
  static const char *const kwlist[] = { "key", "i", 0 };
  struct bin k;

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&O&:new", KWLIST,
				   convbin, &k, convu32, &i))
    goto end;
  if (keysz(k.sz, info->keysz) != k.sz) VALERR("bad key length");
  return (grand_dopywrap(ty,
			 ((gcirand_func *)info->func)(k.p, k.sz, i),
			 f_freeme));
end:
  return (0);
}

static PyObject *gcnrand_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  const gccrand_info *info = GCCRAND_INFO(ty);
  static const char *const kwlist[] = { "key", "nonce", 0 };
  struct bin k, n;

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&O&:new", KWLIST,
				   convbin, &k, convbin, &n))
    goto end;
  if (keysz(k.sz, info->keysz) != k.sz) VALERR("bad key length");
  if (n.sz != info->noncesz) VALERR("bad nonce length");
  return (grand_dopywrap(ty,
			 ((gcnrand_func *)info->func)(k.p, k.sz, n.p),
			 f_freeme));
end:
  return (0);
}

static PyObject *gcshakyrand_pynew(PyTypeObject *ty,
				   PyObject *arg, PyObject *kw)
{
  const gccrand_info *info = GCCRAND_INFO(ty);
  static const char
    *const kwlist_shake[] = { "key", "func", "perso", 0 },
    *const kwlist_func[] = { "key", "perso", 0 };
  struct bin k, f = { 0, 0 }, p = { 0, 0 };

  if ((info->f&RNGF_MASK) == RNG_SHAKE
	? !PyArg_ParseTupleAndKeywords(arg, kw, "O&|O&O&:new",
				       (/*unconst*/ char **)kwlist_shake,
				       convbin, &k,
				       convbin, &f, convbin, &p)
	: !PyArg_ParseTupleAndKeywords(arg, kw, "O&|O&:new",
				       (/*unconst*/ char **)kwlist_func,
				       convbin, &k, convbin, &p))
    goto end;
  if (keysz(k.sz, info->keysz) != k.sz) VALERR("bad key length");
  return (grand_dopywrap(ty,
			 (info->f&RNGF_MASK) == RNG_SHAKE
			   ? ((gcshakerand_func *)info->func)(f.p, f.sz,
							      p.p, p.sz,
							      k.p, k.sz)
			   : ((gcshafuncrand_func *)info->func)(p.p, p.sz,
								k.p, k.sz),
			 f_freeme));
end:
  return (0);
}

static PyObject *gccrand_pywrap(const gccrand_info *info)
{
  gccrand_pyobj *g = newtype(gccrand_pytype, 0, info->name);
  g->info = info;
  g->ty.ht_type.tp_basicsize = sizeof(grand_pyobj);
  switch (info->f&RNGF_MASK) {
    case RNG_LATIN: g->ty.ht_type.tp_base = gclatinrand_pytype; break;
    default: g->ty.ht_type.tp_base = gcrand_pytype; break;
  }
  Py_INCREF(g->ty.ht_type.tp_base);
  g->ty.ht_type.tp_flags = (Py_TPFLAGS_DEFAULT |
			    Py_TPFLAGS_BASETYPE |
			    Py_TPFLAGS_HEAPTYPE);
  g->ty.ht_type.tp_alloc = PyType_GenericAlloc;
  g->ty.ht_type.tp_free = 0;
  switch (info->f&RNGF_MASK) {
    case RNG_LATIN: g->ty.ht_type.tp_new = gcnrand_pynew; break;
    case RNG_SEAL: g->ty.ht_type.tp_new = gcirand_pynew; break;
    case RNG_SHAKE: case RNG_KMAC:
      g->ty.ht_type.tp_new = gcshakyrand_pynew; break;
    default: g->ty.ht_type.tp_new = gcrand_pynew; break;
  }
  typeready(&g->ty.ht_type);
  return ((PyObject *)g);
}

static PyObject *gccrget_name(PyObject *me, void *hunoz)
  { return (TEXT_FROMSTR(GCCRAND_INFO(me)->name)); }
static PyObject *gccrget_keysz(PyObject *me, void *hunoz)
  { return (keysz_pywrap(GCCRAND_INFO(me)->keysz)); }

static PyObject *gclrmeth_tell(PyObject *me)
{
  grand *r = GRAND_R(me);
  PyObject *rc = 0;
  kludge64 off;

  r->ops->misc(r, SALSA20_TELLU64, &off);
  rc = getk64(off);
  return (rc);
}

static PyObject *gclrmeth_seek(PyObject *me, PyObject *arg)
{
  grand *r = GRAND_R(me);
  kludge64 off;

  if (!PyArg_ParseTuple(arg, "O&:seek", convk64, &off)) return (0);
  r->ops->misc(r, SALSA20_SEEKU64, off);
  RETURN_ME;
}

static const PyGetSetDef gccrand_pygetset[] = {
#define GETSETNAME(op, name) gccr##op##_##name
  GET	(keysz,		"CR.keysz -> acceptable key sizes")
  GET	(name,		"CR.name -> name of this kind of generator")
#undef GETSETNAME
  { 0 }
};

static const PyMethodDef gclatinrand_pymethods[] = {
#define METHNAME(name) gclrmeth_##name
  NAMETH(tell,		"R.tell() -> OFF")
  METH	(seek,		"R.seek(OFF)")
#undef METHNAME
  { 0 }
};

static const PyTypeObject gccrand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "GCCRand",				/* @tp_name@ */
  sizeof(gccrand_pyobj),		/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  0,					/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "Metaclass for symmetric crypto-based generators.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  PYGETSET(gccrand),			/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  abstract_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

static const PyTypeObject gcrand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "GCRand",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "Abstract base class for symmetric crypto-based generators.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  0,					/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  abstract_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

static const PyTypeObject gclatinrand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "GCLatinRand",			/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "Abstract base class for symmetric crypto-based generators.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  PYMETHODS(gclatinrand),		/* @tp_methods@ */
  0,					/* @tp_members@ */
  0,					/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  abstract_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

/*----- SSL and TLS generators --------------------------------------------*/

static PyObject *sslprf_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  struct bin k, s;
  const gchash *hco = &md5, *hci = &sha;
  PyObject *rc = 0;
  static const char *const kwlist[] = { "key", "seed", "ohash", "ihash", 0 };

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&O&|O&O&:new", KWLIST,
				   convbin, &k, convbin, &s,
				   convgchash, &hco, convgchash, &hci))
    goto end;
  rc = grand_dopywrap(ty, sslprf_rand(hco, hci, k.p, k.sz, s.p, s.sz),
		      f_freeme);
end:
  return (rc);
}

static PyObject *tlsdx_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  struct bin k, s;
  const gcmac *mc = &sha_hmac;
  PyObject *rc = 0;
  static const char *const kwlist[] = { "key", "seed", "mac", 0 };

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&O&|O&:new", KWLIST,
				   convbin, &k, convbin, &s,
				   convgcmac, &mc))
    goto end;
  rc = grand_dopywrap(ty, tlsdx_rand(mc, k.p, k.sz, s.p, s.sz), f_freeme);
end:
  return (rc);
}

static PyObject *tlsprf_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  struct bin k, s;
  const gcmac *mcl = &md5_hmac, *mcr = &sha_hmac;
  PyObject *rc = 0;
  static const char *const kwlist[] = { "key", "seed", "lmac", "rmac", 0 };

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&O&|O&O&:new", KWLIST,
				   convbin, &k, convbin, &s,
				   convgcmac, &mcl, convgcmac, &mcr))
    goto end;
  rc = grand_dopywrap(ty, tlsprf_rand(mcl, mcr, k.p, k.sz, s.p, s.sz),
		      f_freeme);
end:
  return (rc);
}

static const PyTypeObject sslprf_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "SSLRand",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "SSLRand(KEY, SEED, [ohash = md5], [ihash = sha]):\n"
  "  RNG for SSL master secret.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  0,					/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  sslprf_pynew,				/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

static const PyTypeObject tlsdx_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "TLSDataExpansion",			/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "TLSDataExpansion(KEY, SEED, [mac = sha_hmac]):\n"
  "  TLS data expansion function.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  0,					/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  tlsdx_pynew,				/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

static const PyTypeObject tlsprf_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "TLSPRF",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "TLSPRF(KEY, SEED, [lmac = md5_hmac], [rmac = sha_hmac]):\n"
  "  TLS pseudorandom function.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  0,					/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  tlsprf_pynew,				/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

/*----- DSA generator -----------------------------------------------------*/

static PyObject *dsarand_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  struct bin in;
  PyObject *rc = 0;
  static const char *const kwlist[] = { "seed", 0 };

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&:new", KWLIST, convbin, &in))
    goto end;
  rc = grand_dopywrap(ty, dsarand_create(in.p, in.sz), f_freeme);
end:
  return (rc);
}

static PyObject *drget_seed(PyObject *me, void *hunoz)
{
  grand *r = GRAND_R(me);
  int n = r->ops->misc(r, DSARAND_SEEDSZ);
  PyObject *rc = bytestring_pywrap(0, n);
  r->ops->misc(r, DSARAND_GETSEED, BIN_PTR(rc));
  return (rc);
}

static const PyGetSetDef dsarand_pygetset[] = {
#define GETSETNAME(op, name) dr##op##_##name
  GET	(seed,		"R.seed -> current generator seed")
#undef GETSETNAME
  { 0 }
};

static const PyTypeObject dsarand_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "DSARand",				/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "DSARand(SEED): pseudorandom number generator for DSA parameters.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  0,					/* @tp_methods@ */
  0,					/* @tp_members@ */
  PYGETSET(dsarand),			/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  dsarand_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

/*----- Blum-Blum-Shub generator ------------------------------------------*/

static PyObject *bbs_pynew(PyTypeObject *ty, PyObject *arg, PyObject *kw)
{
  mp *n = 0, *x = MP_TWO;
  PyObject *rc = 0;
  static const char *const kwlist[] = { "n", "x", 0 };

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&|O&:new", KWLIST,
				   convmp, &n, convmp, &x))
    goto end;
  rc = grand_dopywrap(ty, bbs_rand(n, x), f_freeme);
end:
  mp_drop(n);
  mp_drop(x);
  return (rc);
}

static PyObject *bbsmeth_step(PyObject *me)
  { grand *r = GRAND_R(me); r->ops->misc(r, BBS_STEP); RETURN_ME; }

static PyObject *bbsmeth_bits(PyObject *me, PyObject *arg)
{
  grand *r = GRAND_R(me); unsigned n; uint32 w;
  if (!PyArg_ParseTuple(arg, "O&:bits", convuint, &n)) goto end;
  if (n > 32) VALERR("can't get more than 32 bits");
  r->ops->misc(r, BBS_BITS, n, &w); return (getulong(w));
end:
  return (0);
}

static PyObject *bbsmeth_wrap(PyObject *me)
  { grand *r = GRAND_R(me); r->ops->misc(r, BBS_WRAP); RETURN_ME; }

static PyObject *bbsget_n(PyObject *me, void *hunoz)
{
  mp *x = MP_NEW; grand *r = GRAND_R(me);
  r->ops->misc(r, BBS_MOD, &x); return (mp_pywrap(x));
}

static PyObject *bbsget_x(PyObject *me, void *hunoz)
{
  mp *x = MP_NEW; grand *r = GRAND_R(me);
  r->ops->misc(r, BBS_STATE, &x); return (mp_pywrap(x));
}

static int bbsset_x(PyObject *me, PyObject *val, void *hunoz)
{
  mp *x = 0; grand *r = GRAND_R(me); int rc = -1; if (!val) NIERR("__del__");
  if ((x = getmp(val)) == 0) goto end;
  r->ops->misc(r, BBS_SET, x); rc = 0;
  end: mp_drop(x); return (rc);
}

static PyObject *bbsget_stepsz(PyObject *me, void *hunoz)
{
  grand *r = GRAND_R(me);
  return (PyInt_FromLong(r->ops->misc(r, BBS_STEPSZ)));
}

static const PyMethodDef bbs_pymethods[] = {
#define METHNAME(name) bbsmeth_##name
  NAMETH(step,		"R.step(): steps the generator (not useful)")
  METH	(bits,	 "R.bits(N) -> W: returns N bits (<= 32) from the generator")
  NAMETH(wrap,		"R.wrap(): flushes unused bits in internal buffer")
#undef METHNAME
  { 0 }
};

static const PyGetSetDef bbs_pygetset[] = {
#define GETSETNAME(op, name) bbs##op##_##name
  GET	(n,		"R.n -> Blum modulus")
  GETSET(x,		"R.x -> current seed value")
  GET	(stepsz,	"R.stepsz -> number of bits generated per step")
#undef GETSETNAME
  { 0 }
};

static const PyTypeObject bbs_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "BlumBlumShub",			/* @tp_name@ */
  sizeof(grand_pyobj),			/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  grand_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "BlumBlumShub(N, [x = 2]): Blum-Blum-Shub pseudorandom number generator.",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  PYMETHODS(bbs),			/* @tp_methods@ */
  0,					/* @tp_members@ */
  PYGETSET(bbs),			/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  bbs_pynew,				/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

typedef struct bbspriv_pyobj {
  grand_pyobj gr;
  bbs_priv bp;
} bbspriv_pyobj;

#define BBSPRIV_BP(o) (&((bbspriv_pyobj *)(o))->bp)

static PyObject *bbspriv_pynew(PyTypeObject *ty,
			       PyObject *arg, PyObject *kw)
{
  mp *p = 0, *q = 0, *n = 0, *x = MP_TWO;
  bbspriv_pyobj *rc = 0;
  static const char *const kwlist[] = { "n", "p", "q", "seed", 0 };

  if (!PyArg_ParseTupleAndKeywords(arg, kw, "|O&O&O&O&:new", KWLIST,
				   convmp, &n, convmp, &p, convmp, &q,
				   convmp, &x))
    goto end;
  if (!n + !p + !q > 1) VALERR("must specify at least two of n, p, q");
  if (!n) n = mp_mul(MP_NEW, p, q);
  else if (!p) mp_div(&p, 0, n, q);
  else if (!q) mp_div(&q, 0, n, p);
  rc = (bbspriv_pyobj *)ty->tp_alloc(ty, 0);
  rc->gr.r = bbs_rand(n, x);
  rc->gr.f = f_freeme;
  rc->bp.p = MP_COPY(p);
  rc->bp.q = MP_COPY(q);
  rc->bp.n = MP_COPY(n);
end:
  mp_drop(p); mp_drop(q); mp_drop(n); mp_drop(x);
  return ((PyObject *)rc);
}

static PyObject *bpmeth_generate(PyObject *me, PyObject *arg, PyObject *kw)
{
  bbs_priv bp = { 0 };
  mp *x = MP_TWO;
  struct excinfo exc = EXCINFO_INIT;
  pypgev evt = { { 0 } };
  unsigned nbits, n = 0;
  grand *r = &rand_global;
  static const char *const kwlist[] =
    { "nbits", "event", "rng", "nsteps", "seed", 0 };
  bbspriv_pyobj *rc = 0;

  evt.exc = &exc;
  if (!PyArg_ParseTupleAndKeywords(arg, kw, "O&|O&O&O&O&:generate", KWLIST,
				   convuint, &nbits, convpgev, &evt,
				   convgrand, &r, convuint, &n, convmp, &x))
    goto end;
  if (bbs_gen(&bp, nbits, r, n, evt.ev.proc, evt.ev.ctx))
    PGENERR(&exc);
  rc = PyObject_New(bbspriv_pyobj, bbspriv_pytype);
  rc->gr.r = bbs_rand(bp.n, x);
  rc->gr.f = f_freeme;
  rc->bp.p = MP_COPY(bp.p);
  rc->bp.q = MP_COPY(bp.q);
  rc->bp.n = MP_COPY(bp.n);
end:
  mp_drop(bp.p); mp_drop(bp.q); mp_drop(bp.n); mp_drop(x);
  return ((PyObject *)rc);
}

static void bbspriv_pydealloc(PyObject *me)
{
  bbs_priv *bp = BBSPRIV_BP(me);
  mp_drop(bp->n);
  mp_drop(bp->p);
  mp_drop(bp->q);
  grand_pydealloc(me);
}

static PyObject *bpmeth_ff(PyObject *me, PyObject *arg)
{
  mp *n = 0; grand *r = GRAND_R(me); bbs_priv *bp = BBSPRIV_BP(me);
  if (!PyArg_ParseTuple(arg, "O&:ff", convmp, &n)) return (0);
  r->ops->misc(r, BBS_FF, bp, n); RETURN_ME;
}

static PyObject *bpmeth_rew(PyObject *me, PyObject *arg)
{
  mp *n = 0; grand *r = GRAND_R(me); bbs_priv *bp = BBSPRIV_BP(me);
  if (!PyArg_ParseTuple(arg, "O&:rew", convmp, &n)) return (0);
  r->ops->misc(r, BBS_REW, bp, n); RETURN_ME;
}

static PyObject *bpget_n(PyObject *me, void *hunoz)
  { return (mp_pywrap(MP_COPY(BBSPRIV_BP(me)->n))); }

static PyObject *bpget_p(PyObject *me, void *hunoz)
  { return (mp_pywrap(MP_COPY(BBSPRIV_BP(me)->p))); }

static PyObject *bpget_q(PyObject *me, void *hunoz)
  { return (mp_pywrap(MP_COPY(BBSPRIV_BP(me)->q))); }

static const PyMethodDef bbspriv_pymethods[] = {
#define METHNAME(name) bpmeth_##name
  METH	(ff,		"R.ff(N): fast-forward N places")
  METH	(rew,		"R.rew(N): rewind N places")
  KWSMTH(generate,	"generate(NBITS, [event = pgen_nullev], "
			      "[rng = rand], [nsteps = 0], [seed = 2]) -> R")
#undef METHNAME
  { 0 }
};

static const PyGetSetDef bbspriv_pygetset[] = {
#define GETSETNAME(op, name) bp##op##_##name
  GET	(n,		"R.n -> Blum modulus")
  GET	(p,		"R.p -> one of the factors of the modulus")
  GET	(q,		"R.q -> one of the factors of the modulus")
#undef GETSETNAME
  { 0 }
};

static const PyTypeObject bbspriv_pytype_skel = {
  PyVarObject_HEAD_INIT(0, 0)		/* Header */
  "BBSPriv",				/* @tp_name@ */
  sizeof(bbspriv_pyobj),		/* @tp_basicsize@ */
  0,					/* @tp_itemsize@ */

  bbspriv_pydealloc,			/* @tp_dealloc@ */
  0,					/* @tp_print@ */
  0,					/* @tp_getattr@ */
  0,					/* @tp_setattr@ */
  0,					/* @tp_compare@ */
  0,					/* @tp_repr@ */
  0,					/* @tp_as_number@ */
  0,					/* @tp_as_sequence@ */
  0,					/* @tp_as_mapping@ */
  0,					/* @tp_hash@ */
  0,					/* @tp_call@ */
  0,					/* @tp_str@ */
  0,					/* @tp_getattro@ */
  0,					/* @tp_setattro@ */
  0,					/* @tp_as_buffer@ */
  Py_TPFLAGS_DEFAULT |			/* @tp_flags@ */
    Py_TPFLAGS_BASETYPE,

  /* @tp_doc@ */
  "BBSPriv(..., [seed = 2]): Blum-Blum-Shub, with private key.\n"
  "  Keywords: n, p, q; must provide at least two",

  0,					/* @tp_traverse@ */
  0,					/* @tp_clear@ */
  0,					/* @tp_richcompare@ */
  0,					/* @tp_weaklistoffset@ */
  0,					/* @tp_iter@ */
  0,					/* @tp_iternext@ */
  PYMETHODS(bbspriv),			/* @tp_methods@ */
  0,					/* @tp_members@ */
  PYGETSET(bbspriv),			/* @tp_getset@ */
  0,					/* @tp_base@ */
  0,					/* @tp_dict@ */
  0,					/* @tp_descr_get@ */
  0,					/* @tp_descr_set@ */
  0,					/* @tp_dictoffset@ */
  0,					/* @tp_init@ */
  PyType_GenericAlloc,			/* @tp_alloc@ */
  bbspriv_pynew,			/* @tp_new@ */
  0,					/* @tp_free@ */
  0					/* @tp_is_gc@ */
};

/*----- Global stuff ------------------------------------------------------*/

static const struct nameval consts[] = {
  CONST(RAND_IBITS),
  { 0 }
};

void rand_pyinit(void)
{
  INITTYPE(grand, root);
  INITTYPE(truerand, grand);
  INITTYPE(fibrand, grand);
  INITTYPE(lcrand, grand);
  INITTYPE(dsarand, grand);
  INITTYPE(bbs, grand);
  INITTYPE(bbspriv, bbs);
  INITTYPE(sslprf, grand);
  INITTYPE(tlsdx, grand);
  INITTYPE(tlsprf, grand);
  INITTYPE(gccrand, type);
  INITTYPE(gcrand, grand);
  INITTYPE(gclatinrand, gcrand);
  rand_noisesrc(RAND_GLOBAL, &noise_source);
  rand_seed(RAND_GLOBAL, 160);
}

static const char *crand_namefn(const void *p)
  { const gccrand_info *const *cls = p; return (*cls ? (*cls)->name : 0); }
static PyObject *crand_valfn(const void *p)
  { const gccrand_info *const *cls = p; return (gccrand_pywrap(*cls)); }

void rand_pyinsert(PyObject *mod)
{
  INSERT("GRand", grand_pytype);
  INSERT("TrueRand", truerand_pytype);
  INSERT("LCRand", lcrand_pytype);
  INSERT("FibRand", fibrand_pytype);
  INSERT("SSLRand", sslprf_pytype);
  INSERT("TLSDataExpansion", tlsdx_pytype);
  INSERT("TLSPRF", tlsprf_pytype);
  INSERT("DSARand", dsarand_pytype);
  INSERT("BlumBlumShub", bbs_pytype);
  INSERT("BBSPriv", bbspriv_pytype);
  INSERT("GCCRand", gccrand_pytype);
  INSERT("GCRand", gcrand_pytype);
  INSERT("GCLatinRand", gclatinrand_pytype);
  rand_pyobj = grand_pywrap(&rand_global, 0); Py_INCREF(rand_pyobj);
  gccrands_dict = make_algtab(gcrandtab, sizeof(gccrand_info *),
			      crand_namefn, crand_valfn);
  INSERT("gccrands", gccrands_dict); Py_INCREF(gccrands_dict);
  INSERT("rand", rand_pyobj);
  setconstants(mod, consts);
}

/*----- That's all, folks -------------------------------------------------*/