Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(76)

Unified Diff: crypto/signature_verifier_mac.cc

Issue 6805019: Move crypto files out of base, to a top level directory. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Fixes comments by eroman Created 9 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « crypto/signature_verifier.h ('k') | crypto/signature_verifier_nss.cc » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: crypto/signature_verifier_mac.cc
===================================================================
--- crypto/signature_verifier_mac.cc (revision 0)
+++ crypto/signature_verifier_mac.cc (revision 0)
@@ -0,0 +1,105 @@
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "crypto/signature_verifier.h"
+
+#include <stdlib.h>
+
+#include "base/logging.h"
+#include "crypto/cssm_init.h"
+
+namespace crypto {
+
+SignatureVerifier::SignatureVerifier() : sig_handle_(0) {
+ EnsureCSSMInit();
+}
+
+SignatureVerifier::~SignatureVerifier() {
+ Reset();
+}
+
+bool SignatureVerifier::VerifyInit(const uint8* signature_algorithm,
+ int signature_algorithm_len,
+ const uint8* signature,
+ int signature_len,
+ const uint8* public_key_info,
+ int public_key_info_len) {
+ signature_.assign(signature, signature + signature_len);
+ public_key_info_.assign(public_key_info,
+ public_key_info + public_key_info_len);
+
+ CSSM_ALGORITHMS key_alg = CSSM_ALGID_RSA; // TODO(wtc): hardcoded.
+
+ memset(&public_key_, 0, sizeof(public_key_));
+ public_key_.KeyData.Data = const_cast<uint8*>(&public_key_info_[0]);
+ public_key_.KeyData.Length = public_key_info_.size();
+ public_key_.KeyHeader.HeaderVersion = CSSM_KEYHEADER_VERSION;
+ public_key_.KeyHeader.BlobType = CSSM_KEYBLOB_RAW;
+ public_key_.KeyHeader.Format = CSSM_KEYBLOB_RAW_FORMAT_X509;
+ public_key_.KeyHeader.AlgorithmId = key_alg;
+ public_key_.KeyHeader.KeyClass = CSSM_KEYCLASS_PUBLIC_KEY;
+ public_key_.KeyHeader.KeyAttr = CSSM_KEYATTR_EXTRACTABLE;
+ public_key_.KeyHeader.KeyUsage = CSSM_KEYUSE_VERIFY;
+ CSSM_KEY_SIZE key_size;
+ CSSM_RETURN crtn;
+ crtn = CSSM_QueryKeySizeInBits(GetSharedCSPHandle(), NULL,
+ &public_key_, &key_size);
+ if (crtn) {
+ NOTREACHED() << "CSSM_QueryKeySizeInBits failed: " << crtn;
+ return false;
+ }
+ public_key_.KeyHeader.LogicalKeySizeInBits = key_size.LogicalKeySizeInBits;
+
+ // TODO(wtc): decode signature_algorithm...
+ CSSM_ALGORITHMS sig_alg = CSSM_ALGID_SHA1WithRSA;
+
+ crtn = CSSM_CSP_CreateSignatureContext(GetSharedCSPHandle(), sig_alg, NULL,
+ &public_key_, &sig_handle_);
+ if (crtn) {
+ NOTREACHED();
+ return false;
+ }
+ crtn = CSSM_VerifyDataInit(sig_handle_);
+ if (crtn) {
+ NOTREACHED();
+ return false;
+ }
+ return true;
+}
+
+void SignatureVerifier::VerifyUpdate(const uint8* data_part,
+ int data_part_len) {
+ CSSM_DATA data;
+ data.Data = const_cast<uint8*>(data_part);
+ data.Length = data_part_len;
+ CSSM_RETURN crtn = CSSM_VerifyDataUpdate(sig_handle_, &data, 1);
+ DCHECK(crtn == CSSM_OK);
+}
+
+bool SignatureVerifier::VerifyFinal() {
+ CSSM_DATA sig;
+ sig.Data = const_cast<uint8*>(&signature_[0]);
+ sig.Length = signature_.size();
+ CSSM_RETURN crtn = CSSM_VerifyDataFinal(sig_handle_, &sig);
+ Reset();
+
+ // crtn is CSSMERR_CSP_VERIFY_FAILED if signature verification fails.
+ return (crtn == CSSM_OK);
+}
+
+void SignatureVerifier::Reset() {
+ CSSM_RETURN crtn;
+ if (sig_handle_) {
+ crtn = CSSM_DeleteContext(sig_handle_);
+ DCHECK(crtn == CSSM_OK);
+ sig_handle_ = 0;
+ }
+ signature_.clear();
+
+ // Can't call CSSM_FreeKey on public_key_ because we constructed
+ // public_key_ manually.
+}
+
+} // namespace crypto
+
Property changes on: crypto\signature_verifier_mac.cc
___________________________________________________________________
Added: svn:eol-style
+ LF
« no previous file with comments | « crypto/signature_verifier.h ('k') | crypto/signature_verifier_nss.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698