| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef CHROME_BROWSER_SYNC_UTIL_CRYPTOGRAPHER_H_ | 5 #ifndef CHROME_BROWSER_SYNC_UTIL_CRYPTOGRAPHER_H_ |
| 6 #define CHROME_BROWSER_SYNC_UTIL_CRYPTOGRAPHER_H_ | 6 #define CHROME_BROWSER_SYNC_UTIL_CRYPTOGRAPHER_H_ |
| 7 #pragma once | 7 #pragma once |
| 8 | 8 |
| 9 #include <map> | 9 #include <map> |
| 10 #include <string> | 10 #include <string> |
| (...skipping 44 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 55 // types. | 55 // types. |
| 56 // | 56 // |
| 57 // |encrypted_types| will always be a superset of | 57 // |encrypted_types| will always be a superset of |
| 58 // SensitiveTypes(). If |encrypt_everything| is true, | 58 // SensitiveTypes(). If |encrypt_everything| is true, |
| 59 // |encrypted_types| will be the set of all known types. | 59 // |encrypted_types| will be the set of all known types. |
| 60 // | 60 // |
| 61 // Until this function is called, observers can assume that the | 61 // Until this function is called, observers can assume that the |
| 62 // set of encrypted types is SensitiveTypes() and that the encrypt | 62 // set of encrypted types is SensitiveTypes() and that the encrypt |
| 63 // everything flag is false. | 63 // everything flag is false. |
| 64 virtual void OnEncryptedTypesChanged( | 64 virtual void OnEncryptedTypesChanged( |
| 65 syncable::ModelEnumSet encrypted_types, | 65 syncable::ModelTypeSet encrypted_types, |
| 66 bool encrypt_everything) = 0; | 66 bool encrypt_everything) = 0; |
| 67 | 67 |
| 68 protected: | 68 protected: |
| 69 virtual ~Observer(); | 69 virtual ~Observer(); |
| 70 }; | 70 }; |
| 71 | 71 |
| 72 Cryptographer(); | 72 Cryptographer(); |
| 73 ~Cryptographer(); | 73 ~Cryptographer(); |
| 74 | 74 |
| 75 // When update on cryptographer is called this enum tells if the | 75 // When update on cryptographer is called this enum tells if the |
| (...skipping 80 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 156 // can't be created (i.e. if this Cryptograhper doesn't have valid keys). | 156 // can't be created (i.e. if this Cryptograhper doesn't have valid keys). |
| 157 bool GetBootstrapToken(std::string* token) const; | 157 bool GetBootstrapToken(std::string* token) const; |
| 158 | 158 |
| 159 // Update the cryptographer based on the contents of the nigori specifics. | 159 // Update the cryptographer based on the contents of the nigori specifics. |
| 160 // This updates both the encryption keys and the set of encrypted types. | 160 // This updates both the encryption keys and the set of encrypted types. |
| 161 // Returns NEEDS_PASSPHRASE if was unable to decrypt the pending keys, | 161 // Returns NEEDS_PASSPHRASE if was unable to decrypt the pending keys, |
| 162 // SUCCESS otherwise. | 162 // SUCCESS otherwise. |
| 163 UpdateResult Update(const sync_pb::NigoriSpecifics& nigori); | 163 UpdateResult Update(const sync_pb::NigoriSpecifics& nigori); |
| 164 | 164 |
| 165 // The set of types that are always encrypted. | 165 // The set of types that are always encrypted. |
| 166 static syncable::ModelEnumSet SensitiveTypes(); | 166 static syncable::ModelTypeSet SensitiveTypes(); |
| 167 | 167 |
| 168 // Reset our set of encrypted types based on the contents of the nigori | 168 // Reset our set of encrypted types based on the contents of the nigori |
| 169 // specifics. | 169 // specifics. |
| 170 void UpdateEncryptedTypesFromNigori(const sync_pb::NigoriSpecifics& nigori); | 170 void UpdateEncryptedTypesFromNigori(const sync_pb::NigoriSpecifics& nigori); |
| 171 | 171 |
| 172 // Update the nigori to reflect the current set of encrypted types. | 172 // Update the nigori to reflect the current set of encrypted types. |
| 173 void UpdateNigoriFromEncryptedTypes(sync_pb::NigoriSpecifics* nigori) const; | 173 void UpdateNigoriFromEncryptedTypes(sync_pb::NigoriSpecifics* nigori) const; |
| 174 | 174 |
| 175 // Setter/getter for whether all current and future datatypes should | 175 // Setter/getter for whether all current and future datatypes should |
| 176 // be encrypted. Once set you cannot unset without reading from a | 176 // be encrypted. Once set you cannot unset without reading from a |
| 177 // new nigori node. set_encrypt_everything() emits a notification | 177 // new nigori node. set_encrypt_everything() emits a notification |
| 178 // the first time it's called. | 178 // the first time it's called. |
| 179 void set_encrypt_everything(); | 179 void set_encrypt_everything(); |
| 180 bool encrypt_everything() const; | 180 bool encrypt_everything() const; |
| 181 | 181 |
| 182 // Return the set of encrypted types. | 182 // Return the set of encrypted types. |
| 183 syncable::ModelEnumSet GetEncryptedTypes() const; | 183 syncable::ModelTypeSet GetEncryptedTypes() const; |
| 184 | 184 |
| 185 // Forwards to MergeEncryptedTypes. | 185 // Forwards to MergeEncryptedTypes. |
| 186 void MergeEncryptedTypesForTest( | 186 void MergeEncryptedTypesForTest( |
| 187 syncable::ModelEnumSet encrypted_types); | 187 syncable::ModelTypeSet encrypted_types); |
| 188 | 188 |
| 189 private: | 189 private: |
| 190 FRIEND_TEST_ALL_PREFIXES(CryptographerTest, PackUnpack); | 190 FRIEND_TEST_ALL_PREFIXES(CryptographerTest, PackUnpack); |
| 191 typedef std::map<std::string, linked_ptr<const Nigori> > NigoriMap; | 191 typedef std::map<std::string, linked_ptr<const Nigori> > NigoriMap; |
| 192 | 192 |
| 193 // Merges the given set of encrypted types with the existing set and emits a | 193 // Merges the given set of encrypted types with the existing set and emits a |
| 194 // notification if necessary. | 194 // notification if necessary. |
| 195 void MergeEncryptedTypes(syncable::ModelEnumSet encrypted_types); | 195 void MergeEncryptedTypes(syncable::ModelTypeSet encrypted_types); |
| 196 | 196 |
| 197 void EmitEncryptedTypesChangedNotification(); | 197 void EmitEncryptedTypesChangedNotification(); |
| 198 | 198 |
| 199 // Helper method to instantiate Nigori instances for each set of key | 199 // Helper method to instantiate Nigori instances for each set of key |
| 200 // parameters in |bag| and setting the default encryption key to | 200 // parameters in |bag| and setting the default encryption key to |
| 201 // |default_key_name|. | 201 // |default_key_name|. |
| 202 void InstallKeys(const std::string& default_key_name, | 202 void InstallKeys(const std::string& default_key_name, |
| 203 const sync_pb::NigoriKeyBag& bag); | 203 const sync_pb::NigoriKeyBag& bag); |
| 204 | 204 |
| 205 bool AddKeyImpl(Nigori* nigori); | 205 bool AddKeyImpl(Nigori* nigori); |
| 206 | 206 |
| 207 // Functions to serialize + encrypt a Nigori object in an opaque format for | 207 // Functions to serialize + encrypt a Nigori object in an opaque format for |
| 208 // persistence by sync infrastructure. | 208 // persistence by sync infrastructure. |
| 209 bool PackBootstrapToken(const Nigori* nigori, std::string* pack_into) const; | 209 bool PackBootstrapToken(const Nigori* nigori, std::string* pack_into) const; |
| 210 Nigori* UnpackBootstrapToken(const std::string& token) const; | 210 Nigori* UnpackBootstrapToken(const std::string& token) const; |
| 211 | 211 |
| 212 ObserverList<Observer> observers_; | 212 ObserverList<Observer> observers_; |
| 213 | 213 |
| 214 NigoriMap nigoris_; // The Nigoris we know about, mapped by key name. | 214 NigoriMap nigoris_; // The Nigoris we know about, mapped by key name. |
| 215 NigoriMap::value_type* default_nigori_; // The Nigori used for encryption. | 215 NigoriMap::value_type* default_nigori_; // The Nigori used for encryption. |
| 216 | 216 |
| 217 scoped_ptr<sync_pb::EncryptedData> pending_keys_; | 217 scoped_ptr<sync_pb::EncryptedData> pending_keys_; |
| 218 | 218 |
| 219 syncable::ModelEnumSet encrypted_types_; | 219 syncable::ModelTypeSet encrypted_types_; |
| 220 bool encrypt_everything_; | 220 bool encrypt_everything_; |
| 221 | 221 |
| 222 DISALLOW_COPY_AND_ASSIGN(Cryptographer); | 222 DISALLOW_COPY_AND_ASSIGN(Cryptographer); |
| 223 }; | 223 }; |
| 224 | 224 |
| 225 } // namespace browser_sync | 225 } // namespace browser_sync |
| 226 | 226 |
| 227 #endif // CHROME_BROWSER_SYNC_UTIL_CRYPTOGRAPHER_H_ | 227 #endif // CHROME_BROWSER_SYNC_UTIL_CRYPTOGRAPHER_H_ |
| OLD | NEW |