OLD | NEW |
(Empty) | |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include "crypto/symmetric_key.h" |
| 6 |
| 7 #include <openssl/evp.h> |
| 8 #include <openssl/rand.h> |
| 9 |
| 10 #include <algorithm> |
| 11 |
| 12 #include "base/logging.h" |
| 13 #include "base/memory/scoped_ptr.h" |
| 14 #include "base/string_util.h" |
| 15 #include "crypto/openssl_util.h" |
| 16 |
| 17 namespace crypto { |
| 18 |
| 19 SymmetricKey::~SymmetricKey() { |
| 20 std::fill(key_.begin(), key_.end(), '\0'); // Zero out the confidential key. |
| 21 } |
| 22 |
| 23 // static |
| 24 SymmetricKey* SymmetricKey::GenerateRandomKey(Algorithm algorithm, |
| 25 size_t key_size_in_bits) { |
| 26 DCHECK_EQ(AES, algorithm); |
| 27 int key_size_in_bytes = key_size_in_bits / 8; |
| 28 DCHECK_EQ(static_cast<int>(key_size_in_bits), key_size_in_bytes * 8); |
| 29 |
| 30 if (key_size_in_bits == 0) |
| 31 return NULL; |
| 32 |
| 33 OpenSSLErrStackTracer err_tracer(FROM_HERE); |
| 34 scoped_ptr<SymmetricKey> key(new SymmetricKey); |
| 35 uint8* key_data = |
| 36 reinterpret_cast<uint8*>(WriteInto(&key->key_, key_size_in_bytes + 1)); |
| 37 |
| 38 int rv = RAND_bytes(key_data, key_size_in_bytes); |
| 39 return rv == 1 ? key.release() : NULL; |
| 40 } |
| 41 |
| 42 // static |
| 43 SymmetricKey* SymmetricKey::DeriveKeyFromPassword(Algorithm algorithm, |
| 44 const std::string& password, |
| 45 const std::string& salt, |
| 46 size_t iterations, |
| 47 size_t key_size_in_bits) { |
| 48 DCHECK(algorithm == AES || algorithm == HMAC_SHA1); |
| 49 int key_size_in_bytes = key_size_in_bits / 8; |
| 50 DCHECK_EQ(static_cast<int>(key_size_in_bits), key_size_in_bytes * 8); |
| 51 |
| 52 OpenSSLErrStackTracer err_tracer(FROM_HERE); |
| 53 scoped_ptr<SymmetricKey> key(new SymmetricKey); |
| 54 uint8* key_data = |
| 55 reinterpret_cast<uint8*>(WriteInto(&key->key_, key_size_in_bytes + 1)); |
| 56 int rv = PKCS5_PBKDF2_HMAC_SHA1(password.data(), password.length(), |
| 57 reinterpret_cast<const uint8*>(salt.data()), |
| 58 salt.length(), iterations, |
| 59 key_size_in_bytes, key_data); |
| 60 return rv == 1 ? key.release() : NULL; |
| 61 } |
| 62 |
| 63 // static |
| 64 SymmetricKey* SymmetricKey::Import(Algorithm algorithm, |
| 65 const std::string& raw_key) { |
| 66 scoped_ptr<SymmetricKey> key(new SymmetricKey); |
| 67 key->key_ = raw_key; |
| 68 return key.release(); |
| 69 } |
| 70 |
| 71 bool SymmetricKey::GetRawKey(std::string* raw_key) { |
| 72 *raw_key = key_; |
| 73 return true; |
| 74 } |
| 75 |
| 76 } // namespace crypto |
OLD | NEW |