Private API for extensions like ssh-client that need access to TCP.

base/crypto/symmetric_key_win.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/crypto/symmetric_key.h"
 
 #include <winsock2.h>  // For htonl.
 
 #include <vector>
 
@@ skipping 294 matching lines @@
 }  // namespace
 
 SymmetricKey::~SymmetricKey() {
   // TODO(wtc): create a "secure" string type that zeroes itself in the
   // destructor.
   if (!raw_key_.empty())
     SecureZeroMemory(const_cast<char *>(raw_key_.data()), raw_key_.size());
 }
 
 // static
+bool SymmetricKey::GenerateRandomBytes(size_t num_bytes, uint8* out) {
+  if (num_bytes == 0)
+    return true;
+  if (out == NULL)
+    return false;
+
+  ScopedHCRYPTPROV provider;
+  // See comment in GenerateAESKey as to why NULL is acceptable for the
+  // container name.
+  if (!CryptAcquireContext(
+      provider.receive(), NULL, NULL, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT)) {
+    return false;
+  }
+  if (CryptGenRandom(provider, num_bytes, out))
+    return true;
+  else
+    return false;
+}
+
+// static
 SymmetricKey* SymmetricKey::GenerateRandomKey(Algorithm algorithm,
                                               size_t key_size_in_bits) {
   DCHECK_GE(key_size_in_bits, 8);
 
   ScopedHCRYPTPROV provider;
   ScopedHCRYPTKEY key;
 
   bool ok = false;
   scoped_array<BYTE> raw_key;
 
@@ skipping 202 matching lines @@
                            HCRYPTKEY key,
                            const void* key_data, size_t key_size_in_bytes)
     : provider_(provider), key_(key) {
   if (key_data) {
     raw_key_.assign(reinterpret_cast<const char*>(key_data),
                     key_size_in_bytes);
   }
 }
 
 }  // namespace base