Index: content/child/webcrypto/nss/hmac_nss.cc |
diff --git a/content/child/webcrypto/nss/hmac_nss.cc b/content/child/webcrypto/nss/hmac_nss.cc |
deleted file mode 100644 |
index f8a9d9b3cf4f2d3c0111413cf6758fae608852f4..0000000000000000000000000000000000000000 |
--- a/content/child/webcrypto/nss/hmac_nss.cc |
+++ /dev/null |
@@ -1,265 +0,0 @@ |
-// Copyright 2014 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#include <cryptohi.h> |
-#include <pk11pub.h> |
-#include <secerr.h> |
-#include <sechash.h> |
- |
-#include "base/logging.h" |
-#include "base/stl_util.h" |
-#include "content/child/webcrypto/algorithm_implementation.h" |
-#include "content/child/webcrypto/crypto_data.h" |
-#include "content/child/webcrypto/jwk.h" |
-#include "content/child/webcrypto/nss/key_nss.h" |
-#include "content/child/webcrypto/nss/sym_key_nss.h" |
-#include "content/child/webcrypto/nss/util_nss.h" |
-#include "content/child/webcrypto/status.h" |
-#include "content/child/webcrypto/webcrypto_util.h" |
-#include "crypto/secure_util.h" |
-#include "third_party/WebKit/public/platform/WebCryptoAlgorithmParams.h" |
-#include "third_party/WebKit/public/platform/WebCryptoKeyAlgorithm.h" |
- |
-namespace content { |
- |
-namespace webcrypto { |
- |
-namespace { |
- |
-const blink::WebCryptoKeyUsageMask kAllKeyUsages = |
- blink::WebCryptoKeyUsageSign | blink::WebCryptoKeyUsageVerify; |
- |
-bool WebCryptoHashToHMACMechanism(const blink::WebCryptoAlgorithm& algorithm, |
- CK_MECHANISM_TYPE* mechanism) { |
- switch (algorithm.id()) { |
- case blink::WebCryptoAlgorithmIdSha1: |
- *mechanism = CKM_SHA_1_HMAC; |
- return true; |
- case blink::WebCryptoAlgorithmIdSha256: |
- *mechanism = CKM_SHA256_HMAC; |
- return true; |
- case blink::WebCryptoAlgorithmIdSha384: |
- *mechanism = CKM_SHA384_HMAC; |
- return true; |
- case blink::WebCryptoAlgorithmIdSha512: |
- *mechanism = CKM_SHA512_HMAC; |
- return true; |
- default: |
- return false; |
- } |
-} |
- |
-class HmacImplementation : public AlgorithmImplementation { |
- public: |
- HmacImplementation() {} |
- |
- Status GenerateKey(const blink::WebCryptoAlgorithm& algorithm, |
- bool extractable, |
- blink::WebCryptoKeyUsageMask usages, |
- GenerateKeyResult* result) const override { |
- Status status = CheckKeyCreationUsages(kAllKeyUsages, usages, false); |
- if (status.IsError()) |
- return status; |
- |
- const blink::WebCryptoHmacKeyGenParams* params = |
- algorithm.hmacKeyGenParams(); |
- |
- const blink::WebCryptoAlgorithm& hash = params->hash(); |
- CK_MECHANISM_TYPE mechanism = CKM_INVALID_MECHANISM; |
- if (!WebCryptoHashToHMACMechanism(hash, &mechanism)) |
- return Status::ErrorUnsupported(); |
- |
- unsigned int keylen_bits = 0; |
- status = GetHmacKeyGenLengthInBits(params, &keylen_bits); |
- if (status.IsError()) |
- return status; |
- |
- return GenerateSecretKeyNss( |
- blink::WebCryptoKeyAlgorithm::createHmac(hash.id(), keylen_bits), |
- extractable, usages, keylen_bits, mechanism, result); |
- } |
- |
- Status VerifyKeyUsagesBeforeImportKey( |
- blink::WebCryptoKeyFormat format, |
- blink::WebCryptoKeyUsageMask usages) const override { |
- switch (format) { |
- case blink::WebCryptoKeyFormatRaw: |
- case blink::WebCryptoKeyFormatJwk: |
- return CheckKeyCreationUsages(kAllKeyUsages, usages, false); |
- default: |
- return Status::ErrorUnsupportedImportKeyFormat(); |
- } |
- } |
- |
- Status ImportKeyRaw(const CryptoData& key_data, |
- const blink::WebCryptoAlgorithm& algorithm, |
- bool extractable, |
- blink::WebCryptoKeyUsageMask usages, |
- blink::WebCryptoKey* key) const override { |
- const blink::WebCryptoHmacImportParams* params = |
- algorithm.hmacImportParams(); |
- |
- CK_MECHANISM_TYPE mechanism = CKM_INVALID_MECHANISM; |
- if (!WebCryptoHashToHMACMechanism(params->hash(), &mechanism)) |
- return Status::ErrorUnsupported(); |
- |
- unsigned int keylen_bits = 0; |
- Status status = GetHmacImportKeyLengthBits(params, key_data.byte_length(), |
- &keylen_bits); |
- if (status.IsError()) |
- return status; |
- |
- const blink::WebCryptoKeyAlgorithm key_algorithm = |
- blink::WebCryptoKeyAlgorithm::createHmac(params->hash().id(), |
- keylen_bits); |
- |
- // If no bit truncation was requested, then done! |
- if ((keylen_bits % 8) == 0) { |
- return ImportKeyRawNss(key_data, key_algorithm, extractable, usages, |
- mechanism, key); |
- } |
- |
- // Otherwise zero out the unused bits in the key data before importing. |
- std::vector<uint8_t> modified_key_data( |
- key_data.bytes(), key_data.bytes() + key_data.byte_length()); |
- TruncateToBitLength(keylen_bits, &modified_key_data); |
- return ImportKeyRawNss(CryptoData(modified_key_data), key_algorithm, |
- extractable, usages, mechanism, key); |
- } |
- |
- Status ImportKeyJwk(const CryptoData& key_data, |
- const blink::WebCryptoAlgorithm& algorithm, |
- bool extractable, |
- blink::WebCryptoKeyUsageMask usages, |
- blink::WebCryptoKey* key) const override { |
- const char* algorithm_name = |
- GetJwkHmacAlgorithmName(algorithm.hmacImportParams()->hash().id()); |
- if (!algorithm_name) |
- return Status::ErrorUnexpected(); |
- |
- std::vector<uint8_t> raw_data; |
- Status status = ReadSecretKeyJwk(key_data, algorithm_name, extractable, |
- usages, &raw_data); |
- if (status.IsError()) |
- return status; |
- |
- return ImportKeyRaw(CryptoData(raw_data), algorithm, extractable, usages, |
- key); |
- } |
- |
- Status ExportKeyRaw(const blink::WebCryptoKey& key, |
- std::vector<uint8_t>* buffer) const override { |
- *buffer = SymKeyNss::Cast(key)->raw_key_data(); |
- return Status::Success(); |
- } |
- |
- Status ExportKeyJwk(const blink::WebCryptoKey& key, |
- std::vector<uint8_t>* buffer) const override { |
- SymKeyNss* sym_key = SymKeyNss::Cast(key); |
- const std::vector<uint8_t>& raw_data = sym_key->raw_key_data(); |
- |
- const char* algorithm_name = |
- GetJwkHmacAlgorithmName(key.algorithm().hmacParams()->hash().id()); |
- if (!algorithm_name) |
- return Status::ErrorUnexpected(); |
- |
- WriteSecretKeyJwk(CryptoData(raw_data), algorithm_name, key.extractable(), |
- key.usages(), buffer); |
- |
- return Status::Success(); |
- } |
- |
- Status Sign(const blink::WebCryptoAlgorithm& algorithm, |
- const blink::WebCryptoKey& key, |
- const CryptoData& data, |
- std::vector<uint8_t>* buffer) const override { |
- const blink::WebCryptoAlgorithm& hash = |
- key.algorithm().hmacParams()->hash(); |
- PK11SymKey* sym_key = SymKeyNss::Cast(key)->key(); |
- |
- CK_MECHANISM_TYPE mechanism = CKM_INVALID_MECHANISM; |
- if (!WebCryptoHashToHMACMechanism(hash, &mechanism)) |
- return Status::ErrorUnexpected(); |
- |
- SECItem param_item = {siBuffer, NULL, 0}; |
- SECItem data_item = MakeSECItemForBuffer(data); |
- // First call is to figure out the length. |
- SECItem signature_item = {siBuffer, NULL, 0}; |
- |
- if (PK11_SignWithSymKey(sym_key, mechanism, ¶m_item, &signature_item, |
- &data_item) != SECSuccess) { |
- return Status::OperationError(); |
- } |
- |
- DCHECK_NE(0u, signature_item.len); |
- |
- buffer->resize(signature_item.len); |
- signature_item.data = vector_as_array(buffer); |
- |
- if (PK11_SignWithSymKey(sym_key, mechanism, ¶m_item, &signature_item, |
- &data_item) != SECSuccess) { |
- return Status::OperationError(); |
- } |
- |
- CHECK_EQ(buffer->size(), signature_item.len); |
- return Status::Success(); |
- } |
- |
- Status Verify(const blink::WebCryptoAlgorithm& algorithm, |
- const blink::WebCryptoKey& key, |
- const CryptoData& signature, |
- const CryptoData& data, |
- bool* signature_match) const override { |
- std::vector<uint8_t> result; |
- Status status = Sign(algorithm, key, data, &result); |
- |
- if (status.IsError()) |
- return status; |
- |
- // Do not allow verification of truncated MACs. |
- *signature_match = |
- result.size() == signature.byte_length() && |
- crypto::SecureMemEqual(vector_as_array(&result), signature.bytes(), |
- signature.byte_length()); |
- |
- return Status::Success(); |
- } |
- |
- Status SerializeKeyForClone( |
- const blink::WebCryptoKey& key, |
- blink::WebVector<uint8_t>* key_data) const override { |
- key_data->assign(SymKeyNss::Cast(key)->serialized_key_data()); |
- return Status::Success(); |
- } |
- |
- Status DeserializeKeyForClone(const blink::WebCryptoKeyAlgorithm& algorithm, |
- blink::WebCryptoKeyType type, |
- bool extractable, |
- blink::WebCryptoKeyUsageMask usages, |
- const CryptoData& key_data, |
- blink::WebCryptoKey* key) const override { |
- CK_MECHANISM_TYPE mechanism = CKM_INVALID_MECHANISM; |
- if (!WebCryptoHashToHMACMechanism(algorithm.hmacParams()->hash(), |
- &mechanism)) |
- return Status::ErrorUnsupported(); |
- return ImportKeyRawNss(key_data, algorithm, extractable, usages, mechanism, |
- key); |
- } |
- |
- Status GetKeyLength(const blink::WebCryptoAlgorithm& key_length_algorithm, |
- bool* has_length_bits, |
- unsigned int* length_bits) const override { |
- return GetHmacKeyLength(key_length_algorithm, has_length_bits, length_bits); |
- } |
-}; |
- |
-} // namespace |
- |
-AlgorithmImplementation* CreatePlatformHmacImplementation() { |
- return new HmacImplementation; |
-} |
- |
-} // namespace webcrypto |
- |
-} // namespace content |