Index: base/crypto/rsa_private_key_nss.cc |
diff --git a/base/crypto/rsa_private_key_nss.cc b/base/crypto/rsa_private_key_nss.cc |
deleted file mode 100644 |
index 5c2d3fea7f7eb976b7512f62f318714c992b1b21..0000000000000000000000000000000000000000 |
--- a/base/crypto/rsa_private_key_nss.cc |
+++ /dev/null |
@@ -1,225 +0,0 @@ |
-// Copyright (c) 2009 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#include "base/crypto/rsa_private_key.h" |
- |
-#include <cryptohi.h> |
-#include <keyhi.h> |
-#include <pk11pub.h> |
- |
-#include <iostream> |
-#include <list> |
- |
-#include "base/logging.h" |
-#include "base/nss_init.h" |
-#include "base/scoped_ptr.h" |
-#include "base/string_util.h" |
- |
-// TODO(rafaelw): Consider refactoring common functions and definitions from |
-// rsa_private_key_win.cc or using NSS's ASN.1 encoder. |
-namespace { |
- |
-// ASN.1 encoding of the AlgorithmIdentifier from PKCS #8. |
-const uint8 kRsaAlgorithmIdentifier[] = { |
- 0x30, 0x0D, 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x01, |
- 0x05, 0x00 |
-}; |
- |
-// ASN.1 tags for some types we use. |
-const uint8 kSequenceTag = 0x30; |
-const uint8 kIntegerTag = 0x02; |
-const uint8 kNullTag = 0x05; |
-const uint8 kOctetStringTag = 0x04; |
- |
-static void PrependBytesInOrder(uint8* val, int start, int num_bytes, |
- std::list<uint8>* data) { |
- while(num_bytes > start) { |
- --num_bytes; |
- data->push_front(val[num_bytes]); |
- } |
-} |
- |
-// Helper to prepend an ASN.1 length field. |
-static void PrependLength(size_t size, std::list<uint8>* data) { |
- // The high bit is used to indicate whether additional octets are needed to |
- // represent the length. |
- if (size < 0x80) { |
- data->push_front(static_cast<uint8>(size)); |
- } else { |
- uint8 num_bytes = 0; |
- while (size > 0) { |
- data->push_front(static_cast<uint8>(size & 0xFF)); |
- size >>= 8; |
- num_bytes++; |
- } |
- CHECK(num_bytes <= 4); |
- data->push_front(0x80 | num_bytes); |
- } |
-} |
- |
-// Helper to prepend an ASN.1 type header. |
-static void PrependTypeHeaderAndLength(uint8 type, uint32 length, |
- std::list<uint8>* output) { |
- PrependLength(length, output); |
- output->push_front(type); |
-} |
- |
-// Helper to prepend an ASN.1 integer. |
-static void PrependInteger(uint8* val, int num_bytes, std::list<uint8>* data) { |
- // ASN.1 integers are unpadded byte arrays, so skip any null padding bytes |
- // from the most-significant end of the integer. |
- int start = 0; |
- while (start < (num_bytes - 1) && val[start] == 0x00) |
- start++; |
- |
- PrependBytesInOrder(val, start, num_bytes, data); |
- |
- // ASN.1 integers are signed. To encode a positive integer whose sign bit |
- // (the most significant bit) would otherwise be set and make the number |
- // negative, ASN.1 requires a leading null byte to force the integer to be |
- // positive. |
- if ((val[start] & 0x80) != 0) { |
- data->push_front(0x00); |
- num_bytes++; |
- } |
- |
- PrependTypeHeaderAndLength(kIntegerTag, num_bytes, data); |
-} |
- |
-static bool ReadAttributeAndPrependInteger(SECKEYPrivateKey* key, |
- CK_ATTRIBUTE_TYPE type, |
- std::list<uint8>* output) { |
- SECItem item; |
- SECStatus rv; |
- rv = PK11_ReadRawAttribute(PK11_TypePrivKey, key, type, &item); |
- if (rv != SECSuccess) { |
- NOTREACHED(); |
- return false; |
- } |
- |
- PrependInteger(item.data, item.len, output); |
- SECITEM_FreeItem(&item, PR_FALSE); |
- return true; |
-} |
- |
-} // namespace |
- |
- |
-namespace base { |
- |
-// static |
-RSAPrivateKey* RSAPrivateKey::Create(uint16 num_bits) { |
- scoped_ptr<RSAPrivateKey> result(new RSAPrivateKey); |
- |
- PK11SlotInfo *slot = PK11_GetInternalSlot(); |
- if (!slot) |
- return NULL; |
- |
- PK11RSAGenParams param; |
- param.keySizeInBits = num_bits; |
- param.pe = 65537L; |
- result->key_ = PK11_GenerateKeyPair(slot, CKM_RSA_PKCS_KEY_PAIR_GEN, ¶m, |
- &result->public_key_, PR_FALSE, PR_FALSE, NULL); |
- PK11_FreeSlot(slot); |
- if (!result->key_) |
- return NULL; |
- |
- return result.release(); |
-} |
- |
-// static |
-RSAPrivateKey* RSAPrivateKey::CreateFromPrivateKeyInfo( |
- const std::vector<uint8>& input) { |
- scoped_ptr<RSAPrivateKey> result(new RSAPrivateKey); |
- |
- PK11SlotInfo *slot = PK11_GetInternalSlot(); |
- if (!slot) |
- return NULL; |
- |
- SECItem der_private_key_info; |
- der_private_key_info.data = const_cast<unsigned char*>(&input.front()); |
- der_private_key_info.len = input.size(); |
- SECStatus rv = PK11_ImportDERPrivateKeyInfoAndReturnKey(slot, |
- &der_private_key_info, NULL, NULL, PR_FALSE, PR_FALSE, |
- KU_DIGITAL_SIGNATURE, &result->key_, NULL); |
- PK11_FreeSlot(slot); |
- if (rv != SECSuccess) { |
- NOTREACHED(); |
- return NULL; |
- } |
- |
- result->public_key_ = SECKEY_ConvertToPublicKey(result->key_); |
- if (!result->public_key_) { |
- NOTREACHED(); |
- return NULL; |
- } |
- |
- return result.release(); |
-} |
- |
-RSAPrivateKey::RSAPrivateKey() : key_(NULL), public_key_(NULL) { |
- EnsureNSSInit(); |
-} |
- |
-RSAPrivateKey::~RSAPrivateKey() { |
- if (key_) |
- SECKEY_DestroyPrivateKey(key_); |
- if (public_key_) |
- SECKEY_DestroyPublicKey(public_key_); |
-} |
- |
-bool RSAPrivateKey::ExportPrivateKey(std::vector<uint8>* output) { |
- std::list<uint8> content; |
- |
- // Version (always zero) |
- uint8 version = 0; |
- |
- // Manually read the component attributes of the private key and build up the |
- // output in reverse order to prevent having to do copies to figure out the |
- // length. |
- if (!ReadAttributeAndPrependInteger(key_, CKA_COEFFICIENT, &content) || |
- !ReadAttributeAndPrependInteger(key_, CKA_EXPONENT_2, &content) || |
- !ReadAttributeAndPrependInteger(key_, CKA_EXPONENT_1, &content) || |
- !ReadAttributeAndPrependInteger(key_, CKA_PRIME_2, &content) || |
- !ReadAttributeAndPrependInteger(key_, CKA_PRIME_1, &content) || |
- !ReadAttributeAndPrependInteger(key_, CKA_PRIVATE_EXPONENT, &content) || |
- !ReadAttributeAndPrependInteger(key_, CKA_PUBLIC_EXPONENT, &content) || |
- !ReadAttributeAndPrependInteger(key_, CKA_MODULUS, &content)) { |
- NOTREACHED(); |
- return false; |
- } |
- PrependInteger(&version, 1, &content); |
- PrependTypeHeaderAndLength(kSequenceTag, content.size(), &content); |
- PrependTypeHeaderAndLength(kOctetStringTag, content.size(), &content); |
- |
- // RSA algorithm OID |
- for (size_t i = sizeof(kRsaAlgorithmIdentifier); i > 0; --i) |
- content.push_front(kRsaAlgorithmIdentifier[i - 1]); |
- |
- PrependInteger(&version, 1, &content); |
- PrependTypeHeaderAndLength(kSequenceTag, content.size(), &content); |
- |
- // Copy everying into the output. |
- output->reserve(content.size()); |
- for (std::list<uint8>::iterator i = content.begin(); i != content.end(); ++i) |
- output->push_back(*i); |
- |
- return true; |
-} |
- |
-bool RSAPrivateKey::ExportPublicKey(std::vector<uint8>* output) { |
- SECItem* der_pubkey = PK11_DEREncodePublicKey(public_key_); |
- if (!der_pubkey) { |
- NOTREACHED(); |
- return false; |
- } |
- |
- for (size_t i = 0; i < der_pubkey->len; ++i) |
- output->push_back(der_pubkey->data[i]); |
- |
- SECITEM_FreeItem(der_pubkey, PR_TRUE); |
- return true; |
-} |
- |
-} // namespace base |