STM32 F7: add stm32 RNG support. This is copied from stm32l4. Tested on STM32F746ZG board.
This commit is contained in:
parent
ae5b5ae431
commit
9f3b24a4a1
@ -194,3 +194,7 @@ endif
|
|||||||
ifeq ($(CONFIG_STM32F7_BBSRAM),y)
|
ifeq ($(CONFIG_STM32F7_BBSRAM),y)
|
||||||
CHIP_CSRCS += stm32_bbsram.c
|
CHIP_CSRCS += stm32_bbsram.c
|
||||||
endif
|
endif
|
||||||
|
|
||||||
|
ifeq ($(CONFIG_STM32F7_RNG),y)
|
||||||
|
CHIP_CSRCS += stm32_rng.c
|
||||||
|
endif
|
||||||
|
77
arch/arm/src/stm32f7/chip/stm32_rng.h
Normal file
77
arch/arm/src/stm32f7/chip/stm32_rng.h
Normal file
@ -0,0 +1,77 @@
|
|||||||
|
/************************************************************************************
|
||||||
|
* arch/arm/src/stm32f7/chip/stm32_rng.h
|
||||||
|
*
|
||||||
|
* Copyright (C) 2012 Max Holtzberg. All rights reserved.
|
||||||
|
* Author: Max Holtzberg <mh@uvc.de>
|
||||||
|
*
|
||||||
|
* Redistribution and use in source and binary forms, with or without
|
||||||
|
* modification, are permitted provided that the following conditions
|
||||||
|
* are met:
|
||||||
|
*
|
||||||
|
* 1. Redistributions of source code must retain the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer.
|
||||||
|
* 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer in
|
||||||
|
* the documentation and/or other materials provided with the
|
||||||
|
* distribution.
|
||||||
|
* 3. Neither the name NuttX nor the names of its contributors may be
|
||||||
|
* used to endorse or promote products derived from this software
|
||||||
|
* without specific prior written permission.
|
||||||
|
*
|
||||||
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
||||||
|
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
||||||
|
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
||||||
|
* FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
||||||
|
* COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
||||||
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
|
||||||
|
* BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
|
||||||
|
* OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
|
||||||
|
* AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||||
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
|
||||||
|
* ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
||||||
|
* POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
*
|
||||||
|
************************************************************************************/
|
||||||
|
|
||||||
|
#ifndef __ARCH_ARM_STC_STM32F7_CHIP_STM32_RNG_H
|
||||||
|
#define __ARCH_ARM_STC_STM32F7_CHIP_STM32_RNG_H
|
||||||
|
|
||||||
|
/************************************************************************************
|
||||||
|
* Included Files
|
||||||
|
************************************************************************************/
|
||||||
|
|
||||||
|
#include <nuttx/config.h>
|
||||||
|
#include "chip.h"
|
||||||
|
|
||||||
|
/************************************************************************************
|
||||||
|
* Pre-processor Definitions
|
||||||
|
************************************************************************************/
|
||||||
|
|
||||||
|
/* Register Offsets *****************************************************************/
|
||||||
|
|
||||||
|
#define STM32_RNG_CR_OFFSET 0x0000 /* RNG Control Register */
|
||||||
|
#define STM32_RNG_SR_OFFSET 0x0004 /* RNG Status Register */
|
||||||
|
#define STM32_RNG_DR_OFFSET 0x0008 /* RNG Data Register */
|
||||||
|
|
||||||
|
/* Register Addresses ***************************************************************/
|
||||||
|
|
||||||
|
#define STM32_RNG_CR (STM32_RNG_BASE+STM32_RNG_CR_OFFSET)
|
||||||
|
#define STM32_RNG_SR (STM32_RNG_BASE+STM32_RNG_SR_OFFSET)
|
||||||
|
#define STM32_RNG_DR (STM32_RNG_BASE+STM32_RNG_DR_OFFSET)
|
||||||
|
|
||||||
|
/* Register Bitfield Definitions ****************************************************/
|
||||||
|
|
||||||
|
/* RNG Control Register */
|
||||||
|
|
||||||
|
#define RNG_CR_RNGEN (1 << 2) /* Bit 2: RNG enable */
|
||||||
|
#define RNG_CR_IE (1 << 3) /* Bit 3: Interrupt enable */
|
||||||
|
|
||||||
|
/* RNG Status Register */
|
||||||
|
|
||||||
|
#define RNG_SR_DRDY (1 << 0) /* Bit 0: Data ready */
|
||||||
|
#define RNG_SR_CECS (1 << 1) /* Bit 1: Clock error current status */
|
||||||
|
#define RNG_SR_SECS (1 << 2) /* Bit 2: Seed error current status */
|
||||||
|
#define RNG_SR_CEIS (1 << 5) /* Bit 5: Clock error interrupt status */
|
||||||
|
#define RNG_SR_SEIS (1 << 6) /* Bit 6: Seed error interrupt status */
|
||||||
|
|
||||||
|
#endif /* __ARCH_ARM_STC_STM32F7_CHIP_STM32_RNG_H */
|
362
arch/arm/src/stm32f7/stm32_rng.c
Normal file
362
arch/arm/src/stm32f7/stm32_rng.c
Normal file
@ -0,0 +1,362 @@
|
|||||||
|
/****************************************************************************
|
||||||
|
* arch/arm/src/stm32f7/stm32_rng.c
|
||||||
|
*
|
||||||
|
* Copyright (C) 2012 Max Holtzberg. All rights reserved.
|
||||||
|
* Author: Max Holtzberg <mh@uvc.de>
|
||||||
|
* mods for STL32L4 port by dev@ziggurat29.com
|
||||||
|
*
|
||||||
|
* Redistribution and use in source and binary forms, with or without
|
||||||
|
* modification, are permitted provided that the following conditions
|
||||||
|
* are met:
|
||||||
|
*
|
||||||
|
* 1. Redistributions of source code must retain the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer.
|
||||||
|
* 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer in
|
||||||
|
* the documentation and/or other materials provided with the
|
||||||
|
* distribution.
|
||||||
|
* 3. Neither the name NuttX nor the names of its contributors may be
|
||||||
|
* used to endorse or promote products derived from this software
|
||||||
|
* without specific prior written permission.
|
||||||
|
*
|
||||||
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
||||||
|
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
||||||
|
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
||||||
|
* FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
||||||
|
* COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
||||||
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
|
||||||
|
* BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
|
||||||
|
* OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
|
||||||
|
* AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||||
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
|
||||||
|
* ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
||||||
|
* POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
*
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Included Files
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
#include <stdint.h>
|
||||||
|
#include <stdbool.h>
|
||||||
|
#include <stdio.h>
|
||||||
|
#include <string.h>
|
||||||
|
#include <debug.h>
|
||||||
|
#include <errno.h>
|
||||||
|
|
||||||
|
#include <nuttx/irq.h>
|
||||||
|
#include <nuttx/arch.h>
|
||||||
|
#include <nuttx/semaphore.h>
|
||||||
|
#include <nuttx/fs/fs.h>
|
||||||
|
#include <nuttx/drivers/drivers.h>
|
||||||
|
|
||||||
|
#include "up_arch.h"
|
||||||
|
#include "chip/stm32_rng.h"
|
||||||
|
#include "up_internal.h"
|
||||||
|
|
||||||
|
#if defined(CONFIG_STM32F7_RNG)
|
||||||
|
#if defined(CONFIG_DEV_RANDOM) || defined(CONFIG_DEV_URANDOM_ARCH)
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Private Function Prototypes
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
static int stm32_rng_initialize(void);
|
||||||
|
static int stm32_rnginterrupt(int irq, void *context, FAR void *arg);
|
||||||
|
static void stm32_rngenable(void);
|
||||||
|
static void stm32_rngdisable(void);
|
||||||
|
static ssize_t stm32_rngread(struct file *filep, char *buffer, size_t);
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Private Types
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
struct rng_dev_s
|
||||||
|
{
|
||||||
|
sem_t rd_devsem; /* Threads can only exclusively access the RNG */
|
||||||
|
sem_t rd_readsem; /* To block until the buffer is filled */
|
||||||
|
char *rd_buf;
|
||||||
|
size_t rd_buflen;
|
||||||
|
uint32_t rd_lastval;
|
||||||
|
bool rd_first;
|
||||||
|
};
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Private Data
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
static struct rng_dev_s g_rngdev;
|
||||||
|
|
||||||
|
static const struct file_operations g_rngops =
|
||||||
|
{
|
||||||
|
0, /* open */
|
||||||
|
0, /* close */
|
||||||
|
stm32_rngread, /* read */
|
||||||
|
0, /* write */
|
||||||
|
0, /* seek */
|
||||||
|
0 /* ioctl */
|
||||||
|
#ifndef CONFIG_DISABLE_POLL
|
||||||
|
, 0 /* poll */
|
||||||
|
#endif
|
||||||
|
#ifndef CONFIG_DISABLE_PSEUDOFS_OPERATIONS
|
||||||
|
, 0 /* unlink */
|
||||||
|
#endif
|
||||||
|
};
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Private functions
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Name: stm32_rng_initialize
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
static int stm32_rng_initialize(void)
|
||||||
|
{
|
||||||
|
_info("Initializing RNG\n");
|
||||||
|
|
||||||
|
memset(&g_rngdev, 0, sizeof(struct rng_dev_s));
|
||||||
|
|
||||||
|
sem_init(&g_rngdev.rd_devsem, 0, 1);
|
||||||
|
|
||||||
|
if (irq_attach(STM32_IRQ_RNG, stm32_rnginterrupt, NULL))
|
||||||
|
{
|
||||||
|
/* We could not attach the ISR to the interrupt */
|
||||||
|
|
||||||
|
_info("Could not attach IRQ.\n");
|
||||||
|
|
||||||
|
return -EAGAIN;
|
||||||
|
}
|
||||||
|
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Name: stm32_rngenable
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
static void stm32_rngenable(void)
|
||||||
|
{
|
||||||
|
uint32_t regval;
|
||||||
|
|
||||||
|
g_rngdev.rd_first = true;
|
||||||
|
|
||||||
|
/* Enable generation and interrupts */
|
||||||
|
|
||||||
|
regval = getreg32(STM32_RNG_CR);
|
||||||
|
regval |= RNG_CR_RNGEN;
|
||||||
|
regval |= RNG_CR_IE;
|
||||||
|
putreg32(regval, STM32_RNG_CR);
|
||||||
|
|
||||||
|
up_enable_irq(STM32_IRQ_RNG);
|
||||||
|
}
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Name: stm32_rngdisable
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
static void stm32_rngdisable(void)
|
||||||
|
{
|
||||||
|
uint32_t regval;
|
||||||
|
|
||||||
|
up_disable_irq(STM32_IRQ_RNG);
|
||||||
|
|
||||||
|
regval = getreg32(STM32_RNG_CR);
|
||||||
|
regval &= ~RNG_CR_IE;
|
||||||
|
regval &= ~RNG_CR_RNGEN;
|
||||||
|
putreg32(regval, STM32_RNG_CR);
|
||||||
|
}
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Name: stm32_rnginterrupt
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
static int stm32_rnginterrupt(int irq, void *context, FAR void *arg)
|
||||||
|
{
|
||||||
|
uint32_t rngsr;
|
||||||
|
uint32_t data;
|
||||||
|
|
||||||
|
rngsr = getreg32(STM32_RNG_SR);
|
||||||
|
if (rngsr & RNG_SR_CEIS) /* Check for clock error int stat */
|
||||||
|
{
|
||||||
|
/* Clear it, we will try again. */
|
||||||
|
|
||||||
|
putreg32(rngsr & ~RNG_SR_CEIS, STM32_RNG_SR);
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (rngsr & RNG_SR_SEIS) /* Check for seed error in int stat */
|
||||||
|
{
|
||||||
|
uint32_t crval;
|
||||||
|
|
||||||
|
/* Clear seed error, then disable/enable the rng and try again. */
|
||||||
|
|
||||||
|
putreg32(rngsr & ~RNG_SR_SEIS, STM32_RNG_SR);
|
||||||
|
crval = getreg32(STM32_RNG_CR);
|
||||||
|
crval &= ~RNG_CR_RNGEN;
|
||||||
|
putreg32(crval, STM32_RNG_CR);
|
||||||
|
crval |= RNG_CR_RNGEN;
|
||||||
|
putreg32(crval, STM32_RNG_CR);
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!(rngsr & RNG_SR_DRDY)) /* Data ready must be set */
|
||||||
|
{
|
||||||
|
/* This random value is not valid, we will try again. */
|
||||||
|
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
data = getreg32(STM32_RNG_DR);
|
||||||
|
|
||||||
|
/* As required by the FIPS PUB (Federal Information Processing Standard
|
||||||
|
* Publication) 140-2, the first random number generated after setting the
|
||||||
|
* RNGEN bit should not be used, but saved for comparison with the next
|
||||||
|
* generated random number. Each subsequent generated random number has to be
|
||||||
|
* compared with the previously generated number. The test fails if any two
|
||||||
|
* compared numbers are equal (continuous random number generator test).
|
||||||
|
*/
|
||||||
|
|
||||||
|
if (g_rngdev.rd_first)
|
||||||
|
{
|
||||||
|
g_rngdev.rd_first = false;
|
||||||
|
g_rngdev.rd_lastval = data;
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (g_rngdev.rd_lastval == data)
|
||||||
|
{
|
||||||
|
/* Two subsequent same numbers, we will try again. */
|
||||||
|
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* If we get here, the random number is valid. */
|
||||||
|
|
||||||
|
g_rngdev.rd_lastval = data;
|
||||||
|
|
||||||
|
if (g_rngdev.rd_buflen >= 4)
|
||||||
|
{
|
||||||
|
g_rngdev.rd_buflen -= 4;
|
||||||
|
*(uint32_t *)&g_rngdev.rd_buf[g_rngdev.rd_buflen] = data;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
while (g_rngdev.rd_buflen > 0)
|
||||||
|
{
|
||||||
|
g_rngdev.rd_buf[--g_rngdev.rd_buflen] = (char)data;
|
||||||
|
data >>= 8;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (g_rngdev.rd_buflen == 0)
|
||||||
|
{
|
||||||
|
/* Buffer filled, stop further interrupts. */
|
||||||
|
|
||||||
|
stm32_rngdisable();
|
||||||
|
sem_post(&g_rngdev.rd_readsem);
|
||||||
|
}
|
||||||
|
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Name: stm32_rngread
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
static ssize_t stm32_rngread(struct file *filep, char *buffer, size_t buflen)
|
||||||
|
{
|
||||||
|
if (sem_wait(&g_rngdev.rd_devsem) != OK)
|
||||||
|
{
|
||||||
|
return -errno;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
/* We've got the device semaphore, proceed with reading */
|
||||||
|
|
||||||
|
/* Initialize the operation semaphore with 0 for blocking until the
|
||||||
|
* buffer is filled from interrupts. The readsem semaphore is used
|
||||||
|
* for signaling and, hence, should not have priority inheritance
|
||||||
|
* enabled.
|
||||||
|
*/
|
||||||
|
|
||||||
|
sem_init(&g_rngdev.rd_readsem, 0, 0);
|
||||||
|
sem_setprotocol(&g_rngdev.rd_readsem, SEM_PRIO_NONE);
|
||||||
|
|
||||||
|
g_rngdev.rd_buflen = buflen;
|
||||||
|
g_rngdev.rd_buf = buffer;
|
||||||
|
|
||||||
|
/* Enable RNG with interrupts */
|
||||||
|
|
||||||
|
stm32_rngenable();
|
||||||
|
|
||||||
|
/* Wait until the buffer is filled */
|
||||||
|
|
||||||
|
sem_wait(&g_rngdev.rd_readsem);
|
||||||
|
|
||||||
|
/* Done with the operation semaphore */
|
||||||
|
|
||||||
|
sem_destroy(&g_rngdev.rd_readsem);
|
||||||
|
|
||||||
|
/* Free RNG via the device semaphore for next use */
|
||||||
|
|
||||||
|
sem_post(&g_rngdev.rd_devsem);
|
||||||
|
|
||||||
|
return buflen;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Public Functions
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Name: devrandom_register
|
||||||
|
*
|
||||||
|
* Description:
|
||||||
|
* Initialize the RNG hardware and register the /dev/random driver.
|
||||||
|
* Must be called BEFORE devurandom_register.
|
||||||
|
*
|
||||||
|
* Input Parameters:
|
||||||
|
* None
|
||||||
|
*
|
||||||
|
* Returned Value:
|
||||||
|
* None
|
||||||
|
*
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
#ifdef CONFIG_DEV_RANDOM
|
||||||
|
void devrandom_register(void)
|
||||||
|
{
|
||||||
|
stm32_rng_initialize();
|
||||||
|
(void)register_driver("/dev/random", &g_rngops, 0444, NULL);
|
||||||
|
}
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/****************************************************************************
|
||||||
|
* Name: devurandom_register
|
||||||
|
*
|
||||||
|
* Description:
|
||||||
|
* Register /dev/urandom
|
||||||
|
*
|
||||||
|
* Input Parameters:
|
||||||
|
* None
|
||||||
|
*
|
||||||
|
* Returned Value:
|
||||||
|
* None
|
||||||
|
*
|
||||||
|
****************************************************************************/
|
||||||
|
|
||||||
|
#ifdef CONFIG_DEV_URANDOM_ARCH
|
||||||
|
void devurandom_register(void)
|
||||||
|
{
|
||||||
|
#ifndef CONFIG_DEV_RANDOM
|
||||||
|
stm32_rng_initialize();
|
||||||
|
#endif
|
||||||
|
(void)register_driver("/dev/urandom", &g_rngops, 0444, NULL);
|
||||||
|
}
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#endif /* CONFIG_DEV_RANDOM || CONFIG_DEV_URANDOM_ARCH */
|
||||||
|
#endif /* CONFIG_STM32F7_RNG */
|
@ -145,7 +145,7 @@ static void stm32l4_rngenable(void)
|
|||||||
up_enable_irq(STM32L4_IRQ_RNG);
|
up_enable_irq(STM32L4_IRQ_RNG);
|
||||||
}
|
}
|
||||||
|
|
||||||
static void stm32l4_rngdisable()
|
static void stm32l4_rngdisable(void)
|
||||||
{
|
{
|
||||||
uint32_t regval;
|
uint32_t regval;
|
||||||
|
|
||||||
@ -261,7 +261,7 @@ static ssize_t stm32l4_rngread(struct file *filep, char *buffer, size_t buflen)
|
|||||||
/* We've got the device semaphore, proceed with reading */
|
/* We've got the device semaphore, proceed with reading */
|
||||||
|
|
||||||
/* Initialize the operation semaphore with 0 for blocking until the
|
/* Initialize the operation semaphore with 0 for blocking until the
|
||||||
* buffer is filled from interrupts. The waitsem semaphore is used
|
* buffer is filled from interrupts. The readsem semaphore is used
|
||||||
* for signaling and, hence, should not have priority inheritance
|
* for signaling and, hence, should not have priority inheritance
|
||||||
* enabled.
|
* enabled.
|
||||||
*/
|
*/
|
||||||
|
Loading…
Reference in New Issue
Block a user