Add support for x86_64-fortanix-unknown-sgx target

Author: akash-fortanix

Cargo.toml

@@ -286,6 +286,9 @@ libc = { version = "0.2.34" }
 [target.'cfg(any(target_os = "redox", all(unix, not(any(target_os = "macos", target_os = "ios")))))'.dependencies]
 lazy_static = "1.2"
 
+[target.'cfg(target_env = "sgx")'.dependencies]
+rdrand = "0.3.0"
+
 # Keep this in sync with `[dependencies]` in pregenerate_asm/Cargo.toml.
 [build-dependencies]
 # we do not use the gcc parallel feature because we do the

src/rand.rs

@@ -60,6 +60,8 @@ pub trait SecureRandom: private::Sealed {
 /// On Windows, `fill` is implemented using the platform's API for secure
 /// random number generation.
 ///
+/// On SGX, `fill()` is implemented using the `RDRAND` instruction.
+///
 /// Otherwise, `fill()` is implemented by reading from `/dev/urandom`. (This is
 /// something that should be improved for any platform that adds something
 /// better.)
@@ -93,7 +95,7 @@ impl SecureRandom for SystemRandom {
 
 impl private::Sealed for SystemRandom {}
 
-#[cfg(not(any(target_os = "linux", target_os = "macos", target_os = "ios", windows)))]
+#[cfg(not(any(target_os = "linux", target_os = "macos", target_os = "ios", windows, target_env = "sgx")))]
 use self::urandom::fill as fill_impl;
 
 #[cfg(any(
@@ -107,6 +109,9 @@ use self::sysrand_or_urandom::fill as fill_impl;
 
 #[cfg(any(target_os = "macos", target_os = "ios"))]
 use self::darwin::fill as fill_impl;
+
+#[cfg(target_env = "sgx")]
+use self::rdrandom::fill as fill_impl;
 use crate::private;
 
 #[cfg(target_os = "linux")]
@@ -275,6 +280,24 @@ mod darwin {
     }
 }
 
+#[cfg(target_env = "sgx")]
+mod rdrandom {
+    use rdrand::RdRand;
+    use crate::error;
+    use crate::endian::LittleEndian;
+
+    pub fn fill(dest: &mut [u8]) -> Result<(), error::Unspecified> {
+        let rng = RdRand::new().map_err(|_| error::Unspecified)?;
+        for dst_chunk in dest.chunks_mut(8) {
+            let src_num = rng.try_next_u64().ok_or(error::Unspecified)?;
+            let temp = LittleEndian::from(src_num);
+            let src_chunk = temp.as_ref();
+            dst_chunk.copy_from_slice(&src_chunk[..dst_chunk.len()]);
+        }
+        Ok(())
+    }
+}
+
 #[cfg(test)]
 mod tests {
     use crate::rand::{self, SecureRandom};