Private API for extensions like ssh-client that need access to TCP.

base/crypto/symmetric_key_openssl.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/crypto/symmetric_key.h"
 
 #include <openssl/evp.h>
 #include <openssl/rand.h>
 
 #include <algorithm>
 
 #include "base/logging.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/openssl_util.h"
 #include "base/string_util.h"
 
 namespace base {
 
 SymmetricKey::~SymmetricKey() {
   std::fill(key_.begin(), key_.end(), '\0');  // Zero out the confidential key.
 }
 
 // static
+bool SymmetricKey::GenerateRandomBytes(size_t num_bytes, uint8* out) {
+  if (num_bytes == 0)
+    return true;
+  if (out == NULL)
+    return false;
+  OpenSSLErrStackTracer err_tracer(FROM_HERE);
+  return RAND_bytes(out, num_bytes) == 1;
+}
+
+// static
 SymmetricKey* SymmetricKey::GenerateRandomKey(Algorithm algorithm,
                                               size_t key_size_in_bits) {
   DCHECK_EQ(AES, algorithm);
   int key_size_in_bytes = key_size_in_bits / 8;
   DCHECK_EQ(static_cast<int>(key_size_in_bits), key_size_in_bytes * 8);
 
   if (key_size_in_bits == 0)
     return NULL;
-
-  OpenSSLErrStackTracer err_tracer(FROM_HERE);
   scoped_ptr<SymmetricKey> key(new SymmetricKey);
-  uint8* key_data =
-      reinterpret_cast<uint8*>(WriteInto(&key->key_, key_size_in_bytes + 1));
-
-  int rv = RAND_bytes(key_data, key_size_in_bytes);
-  return rv == 1 ? key.release() : NULL;
+  if (GenerateRandomBytes(
+      key_size_in_bytes,
+      reinterpret_cast<uint8*>(WriteInto(&key->key_, key_size_in_bytes + 1)))) {
+    return key.release();
+  } else {
+    return NULL;
+  }
 }
 
 // static
 SymmetricKey* SymmetricKey::DeriveKeyFromPassword(Algorithm algorithm,
                                                   const std::string& password,
                                                   const std::string& salt,
                                                   size_t iterations,
                                                   size_t key_size_in_bits) {
   DCHECK(algorithm == AES || algorithm == HMAC_SHA1);
   int key_size_in_bytes = key_size_in_bits / 8;
@@ skipping 17 matching lines @@
   key->key_ = raw_key;
   return key.release();
 }
 
 bool SymmetricKey::GetRawKey(std::string* raw_key) {
   *raw_key = key_;
   return true;
 }
 
 }  // namespace base