29

I understand that the C specification does not give any specification about the specific implementation of rand(). What different algorithms are commonly used on different major platforms? How do they differ?

1
  • 1
    The main comment is that rand() is only pseudo-random, and often not even a very good pseudo-random generator. The C standard suggests a possible implementation, and many an implementation uses it. As others have noted, there are lots of others. Just ensure that you do not use the basic random functions for situations where you need cryptographic randomness. Jun 23, 2009 at 0:34

3 Answers 3

25

See this article: http://en.wikipedia.org/wiki/List_of_random_number_generators

This is the source code of glibc's rand():

/* Reentrant random function from POSIX.1c.
   Copyright (C) 1996, 1999, 2009 Free Software Foundation, Inc.
   This file is part of the GNU C Library.
   Contributed by Ulrich Drepper <[email protected]>, 1996.

   The GNU C Library is free software; you can redistribute it and/or
   modify it under the terms of the GNU Lesser General Public
   License as published by the Free Software Foundation; either
   version 2.1 of the License, or (at your option) any later version.

   The GNU C Library is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
   Lesser General Public License for more details.

   You should have received a copy of the GNU Lesser General Public
   License along with the GNU C Library; if not, write to the Free
   Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
   02111-1307 USA.  */

#include <stdlib.h>


/* This algorithm is mentioned in the ISO C standard, here extended
   for 32 bits.  */
int
rand_r (unsigned int *seed)
{
  unsigned int next = *seed;
  int result;

  next *= 1103515245;
  next += 12345;
  result = (unsigned int) (next / 65536) % 2048;

  next *= 1103515245;
  next += 12345;
  result <<= 10;
  result ^= (unsigned int) (next / 65536) % 1024;

  next *= 1103515245;
  next += 12345;
  result <<= 10;
  result ^= (unsigned int) (next / 65536) % 1024;

  *seed = next;

  return result;
}

Source: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=stdlib/rand_r.c;hb=HEAD

As you can see, it's simply multiply with an addition and a shift. The values are carefully chosen to make sure that you get no repeat of the output for RAND_MAX iterations.

Note that this is an old implementation which has been replaced by a more complex algorithm: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=stdlib/random_r.c;hb=HEAD

If the link if broken, Google for "glibc rand_r"

12
  • 1
    That's it? Surprisingly simple. Thanks muchly.
    – Jetbeard
    Jun 22, 2009 at 10:04
  • Yes, that's it, most general purpose PNRGs are surprisingly simple to implement. If you're looking for something more complex try the Mersenne Twister. Jun 22, 2009 at 10:12
  • Even MT19937 isn't exactly hard to implement.
    – Joey
    Jun 22, 2009 at 10:56
  • 1
    via @Tiemen below: @Aaron I can not comment but RAND_MAX is the highest possible value returned, not the number of iterations before repeating. Jun 22, 2009 at 21:45
  • 1
    @Payal The code above has O(1) since there are no loops, that is it always executes the same amount of operations and by definition O(N) == O(1). Nov 24, 2020 at 17:06
15

I once wrote a report on CRNGs for a course in Discrete Mathematics. For it, I disassembled rand() in msvcrt.dll:


msvcrt.dll:77C271D8 mov     ecx, [eax+14h]
msvcrt.dll:77C271DB imul    ecx, 343FDh
msvcrt.dll:77C271E1 add     ecx, 269EC3h
msvcrt.dll:77C271E7 mov     [eax+14h], ecx
msvcrt.dll:77C271EA mov     eax, ecx
msvcrt.dll:77C271EC shr     eax, 10h
msvcrt.dll:77C271EF and     eax, 7FFFh

So it's a LCG something like (untested)...


int ms_rand(int& seed)
{
  seed = seed*0x343fd+0x269EC3;  // a=214013, b=2531011
  return (seed >> 0x10) & 0x7FFF;
}
1
  • 1
    The C source code for the Microsoft C Run-time library is available as part of MSDN, and rand()/srand() is included there. See for example the portable implementation of microsoft_rand here: bitbucket.org/shlomif/fc-solve/src/… /board_gen/pi_make_microsoft_freecell_board.c?at=master (short URL - is.gd/kAUmHW . Dec 9, 2012 at 11:28
3

The field of PRNGs (Pseudo Random Number Generators) is quite vast.

First of all you have to understand that without having an external input (usually physical) you can't get a real source of random numbers.. That's why these algorithms are called pseudo random: they usually use a seed to initialize a position in a very long sequence that seems random but it's not random at all.

One of the simplest algorithms is the Linear Congruential Generator (LCG), that has some costraints to guarantee a long sequence and it's not secure at all.

Another funny one (at least for the name) is the Blum Blum Shub Generator (BBS) that is unusual for normal PRNGs because it relies on exponentiation in modulo arithmetic giving a security comparable to other algorithms like RSA and El Gamal in breaking the sequence (also if I'm not sure about the proof of it)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.