This adds support for encrypted ONC import

crypto/hmac.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "crypto/hmac.h"
 
 #include <algorithm>
 
 #include "base/logging.h"
 #include "crypto/secure_util.h"
+#include "crypto/symmetric_key.h"
 
 namespace crypto {
 
+bool HMAC::Init(SymmetricKey* key) {
+  std::string raw_key;
+  bool result = key->GetRawKey(&raw_key) && Init(raw_key);
+  // Zero out key copy.  This probably just gets optimized away,
+  // but one can hope.  Using std::string to store key info at all is a larger
+  // problem. This trys to keep the fill call from being optimized away by
+  // creating an alias to internal data with a volatile.
+  volatile char *optimization_blocker = const_cast<char*>(raw_key.data());
+  std::fill(raw_key.begin(), raw_key.end(), 0);
+  optimization_blocker = NULL;
+  return result;
+}
+
 size_t HMAC::DigestLength() const {
   switch (hash_alg_) {
     case SHA1:
       return 20;
     case SHA256:
       return 32;
     default:
       NOTREACHED();
       return 0;
   }
@@ skipping 14 matching lines @@
   scoped_array<unsigned char> computed_digest(
       new unsigned char[digest_length]);
   if (!Sign(data, computed_digest.get(), static_cast<int>(digest_length)))
     return false;
 
   return SecureMemEqual(digest.data(), computed_digest.get(),
                         std::min(digest.size(), digest_length));
 }
 
 }  // namespace crypto