Implement AES-CTR for NSS.

crypto/encryptor_win.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "crypto/encryptor.h"
 
 #include <vector>
 
 #include "crypto/symmetric_key.h"
 
@@ skipping 21 matching lines @@
     : key_(NULL),
       mode_(CBC),
       block_size_(0) {
 }
 
 Encryptor::~Encryptor() {
 }
 
 bool Encryptor::Init(SymmetricKey* key, Mode mode, const std::string& iv) {
   DCHECK(key);
-  DCHECK_EQ(CBC, mode) << "Unsupported mode of operation";
+  DCHECK(CBC == mode || ECB == mode) << "Unsupported mode of operation";
 
   // In CryptoAPI, the IV, padding mode, and feedback register (for a chaining
   // mode) are properties of a key, so we have to create a copy of the key for
   // the Encryptor.  See the Remarks section of the CryptEncrypt MSDN page.
   BOOL ok = CryptDuplicateKey(key->key(), NULL, 0, capi_key_.receive());
   if (!ok)
     return false;
 
   // CRYPT_MODE_CBC is the default for Microsoft Base Cryptographic Provider,
   // but we set it anyway to be safe.
   DWORD cipher_mode = CRYPT_MODE_CBC;

[Ryan Sleevi, 2011/05/23 05:55:04]

CRYPT_MODE_ECB for ECB. I'm not sure of KP_PADDING is legitimate for
CRYPT_MODE_ECB (MSDN isn't clear), and presumably KP_IV wouldn't be set for
CRYPT_MODE_ECB.

   ok = CryptSetKeyParam(capi_key_.get(), KP_MODE,
                         reinterpret_cast<BYTE*>(&cipher_mode), 0);
   if (!ok)
     return false;
 
   block_size_ = GetCipherBlockSize(capi_key_.get());
   if (block_size_ == 0)
     return false;
 
   if (iv.size() != block_size_)
@@ skipping 42 matching lines @@
   if (!ok)
     return false;
 
   DCHECK_GT(tmp.size(), data_len);
 
   plaintext->assign(reinterpret_cast<char*>(&tmp[0]), data_len);
   return true;
 }
 
 }  // namespace crypto