Make the Nigori user salt key 80-bits to be FIPS compliant.

base/crypto/symmetric_key_mac.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/crypto/symmetric_key.h"
 
 #include <CommonCrypto/CommonCryptor.h>
 #include <CoreFoundation/CFString.h>
 #include <Security/cssm.h>
 
 #include "base/crypto/cssm_init.h"
 #include "base/logging.h"
 #include "base/rand_util.h"
 
 namespace {
 
 CSSM_KEY_TYPE CheckKeyParams(base::SymmetricKey::Algorithm algorithm,
                              size_t key_size_in_bits) {
   if (algorithm == base::SymmetricKey::AES) {
     CHECK(key_size_in_bits == 128 ||
         key_size_in_bits == 192 ||
         key_size_in_bits == 256)
         << "Invalid key size " << key_size_in_bits << " bits";
     return CSSM_ALGID_AES;
   } else {
+    // FIPS 198 Section 3 requires the a SHA-1 derived key to be at least

[wtc, 2010/04/27 18:38:06]

Nit: SHA-1 derived key => HMAC-SHA-1 key

+    // (SHA-1 output size / 2) to be compliant. Since the ouput size of SHA-1 is
+    // 160 bits, we require at least 80 bits here.
     CHECK(algorithm == base::SymmetricKey::HMAC_SHA1);
-    CHECK(key_size_in_bits >= 64 && (key_size_in_bits % 8) == 0)
+    CHECK(key_size_in_bits >= 80 && (key_size_in_bits % 8) == 0)
         << "Invalid key size " << key_size_in_bits << " bits";
     return CSSM_ALGID_SHA1HMAC_LEGACY;
   }
 }
 
 void* CreateRandomBytes(size_t size) {
   CSSM_RETURN err;
   CSSM_CC_HANDLE ctx;
   err = CSSM_CSP_CreateRandomGenContext(base::GetSharedCSPHandle(),
                                         CSSM_ALGID_APPLE_YARROW,
@@ skipping 100 matching lines @@
 bool SymmetricKey::GetRawKey(std::string* raw_key) {
   *raw_key = key_;
   return true;
 }
 
 CSSM_DATA SymmetricKey::cssm_data() const {
   return StringToData(key_);
 }
 
 }  // namespace base