base/crypto/signature_verifier_win.cc - Issue 6805019: Move crypto files out of base, to a top level directory.

Side by Side Diff: base/crypto/signature_verifier_win.cc

Issue 6805019: Move crypto files out of base, to a top level directory. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/

Patch Set: Chrome, webkit, remoting and crypto/owners Created 9 years, 8 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch | Annotate | Revision Log

OLD	NEW
	(Empty)
1 // Copyright (c) 2009 The Chromium Authors. All rights reserved.

2 // Use of this source code is governed by a BSD-style license that can be

3 // found in the LICENSE file.

4

5 #include "base/crypto/signature_verifier.h"

6

7 #include "base/logging.h"

8

9 #pragma comment(lib, "crypt32.lib")

10

11 namespace {

12

13 // Wrappers of malloc and free for CRYPT_DECODE_PARA, which requires the

14 // WINAPI calling convention.

15 void* WINAPI MyCryptAlloc(size_t size) {

16 return malloc(size);

17 }

18

19 void WINAPI MyCryptFree(void* p) {

20 free(p);

21 }

22

23 } // namespace

24

25 namespace base {

26

27 SignatureVerifier::SignatureVerifier() : hash_object_(0), public_key_(0) {

28 if (!CryptAcquireContext(provider_.receive(), NULL, NULL,

29 PROV_RSA_FULL, CRYPT_VERIFYCONTEXT))

30 provider_.reset();

31 }

32

33 SignatureVerifier::~SignatureVerifier() {

34 }

35

36 bool SignatureVerifier::VerifyInit(const uint8* signature_algorithm,

37 int signature_algorithm_len,

38 const uint8* signature,

39 int signature_len,

40 const uint8* public_key_info,

41 int public_key_info_len) {

42 signature_.reserve(signature_len);

43 // CryptoAPI uses big integers in the little-endian byte order, so we need

44 // to first swap the order of signature bytes.

45 for (int i = signature_len - 1; i >= 0; --i)

46 signature_.push_back(signature[i]);

47

48 CRYPT_DECODE_PARA decode_para;

49 decode_para.cbSize = sizeof(decode_para);

50 decode_para.pfnAlloc = MyCryptAlloc;

51 decode_para.pfnFree = MyCryptFree;

52 CERT_PUBLIC_KEY_INFO* cert_public_key_info = NULL;

53 DWORD struct_len = 0;

54 BOOL ok;

55 ok = CryptDecodeObjectEx(X509_ASN_ENCODING \| PKCS_7_ASN_ENCODING,

56 X509_PUBLIC_KEY_INFO,

57 public_key_info,

58 public_key_info_len,

59 CRYPT_DECODE_ALLOC_FLAG \| CRYPT_DECODE_NOCOPY_FLAG,

60 &decode_para,

61 &cert_public_key_info,

62 &struct_len);

63 if (!ok)

64 return false;

65

66 ok = CryptImportPublicKeyInfo(provider_,

67 X509_ASN_ENCODING \| PKCS_7_ASN_ENCODING,

68 cert_public_key_info, public_key_.receive());

69 free(cert_public_key_info);

70 if (!ok)

71 return false;

72

73 CRYPT_ALGORITHM_IDENTIFIER* signature_algorithm_id;

74 struct_len = 0;

75 ok = CryptDecodeObjectEx(X509_ASN_ENCODING \| PKCS_7_ASN_ENCODING,

76 X509_ALGORITHM_IDENTIFIER,

77 signature_algorithm,

78 signature_algorithm_len,

79 CRYPT_DECODE_ALLOC_FLAG \| CRYPT_DECODE_NOCOPY_FLAG,

80 &decode_para,

81 &signature_algorithm_id,

82 &struct_len);

83 DCHECK(ok \|\| GetLastError() == ERROR_FILE_NOT_FOUND);

84 ALG_ID hash_alg_id;

85 if (ok) {

86 hash_alg_id = CALG_MD4; // Initialize to a weak hash algorithm that we

87 // don't support.

88 if (!strcmp(signature_algorithm_id->pszObjId, szOID_RSA_SHA1RSA))

89 hash_alg_id = CALG_SHA1;

90 else if (!strcmp(signature_algorithm_id->pszObjId, szOID_RSA_MD5RSA))

91 hash_alg_id = CALG_MD5;

92 free(signature_algorithm_id);

93 DCHECK(hash_alg_id != CALG_MD4);

94 if (hash_alg_id == CALG_MD4)

95 return false; // Unsupported hash algorithm.

96 } else if (GetLastError() == ERROR_FILE_NOT_FOUND) {

97 // TODO(wtc): X509_ALGORITHM_IDENTIFIER isn't supported on XP SP2. We

98 // may be able to encapsulate signature_algorithm in a dummy SignedContent

99 // and decode it with X509_CERT into a CERT_SIGNED_CONTENT_INFO. For now,

100 // just hardcode the hash algorithm to be SHA-1.

101 hash_alg_id = CALG_SHA1;

102 } else {

103 return false;

104 }

105

106 ok = CryptCreateHash(provider_, hash_alg_id, 0, 0, hash_object_.receive());

107 if (!ok)

108 return false;

109 return true;

110 }

111

112 void SignatureVerifier::VerifyUpdate(const uint8* data_part,

113 int data_part_len) {

114 BOOL ok = CryptHashData(hash_object_, data_part, data_part_len, 0);

115 DCHECK(ok) << "CryptHashData failed: " << GetLastError();

116 }

117

118 bool SignatureVerifier::VerifyFinal() {

119 BOOL ok = CryptVerifySignature(hash_object_, &signature_[0],

120 signature_.size(), public_key_, NULL, 0);

121 Reset();

122 if (!ok)

123 return false;

124 return true;

125 }

126

127 void SignatureVerifier::Reset() {

128 hash_object_.reset();

129 public_key_.reset();

130 signature_.clear();

131 }

132

133 } // namespace base

134

OLD	NEW

« no previous file with comments | « base/crypto/signature_verifier_unittest.cc ('k') | base/crypto/symmetric_key.h » ('j') | crypto/crypto.gyp » ('J')