OLD | NEW |
(Empty) | |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #ifndef CRYPTO_NSS_KEY_UTIL_H_ |
| 6 #define CRYPTO_NSS_KEY_UTIL_H_ |
| 7 |
| 8 #include <stdint.h> |
| 9 |
| 10 #include <vector> |
| 11 |
| 12 #include "build/build_config.h" |
| 13 #include "crypto/crypto_export.h" |
| 14 #include "crypto/scoped_nss_types.h" |
| 15 |
| 16 typedef struct PK11SlotInfoStr PK11SlotInfo; |
| 17 |
| 18 namespace crypto { |
| 19 |
| 20 // Generates a new RSA keypair of size |num_bits| in |slot|. Returns true on |
| 21 // success and false on failure. If |permanent| is true, the resulting key is |
| 22 // permanent and is not exportable in plaintext form. |
| 23 CRYPTO_EXPORT bool GenerateRSAKeyPairNSS( |
| 24 PK11SlotInfo* slot, |
| 25 uint16_t num_bits, |
| 26 bool permanent, |
| 27 ScopedSECKEYPublicKey* out_public_key, |
| 28 ScopedSECKEYPrivateKey* out_private_key); |
| 29 |
| 30 // Imports a private key from |input| into |slot|. |input| is interpreted as a |
| 31 // DER-encoded PrivateKeyInfo block from PKCS #8. Returns nullptr on error. If |
| 32 // |permanent| is true, the resulting key is permanent and is not exportable in |
| 33 // plaintext form. |
| 34 CRYPTO_EXPORT ScopedSECKEYPrivateKey |
| 35 ImportNSSKeyFromPrivateKeyInfo(PK11SlotInfo* slot, |
| 36 const std::vector<uint8_t>& input, |
| 37 bool permanent); |
| 38 |
| 39 #if defined(USE_NSS_CERTS) |
| 40 |
| 41 // Decodes |input| as a DER-encoded X.509 SubjectPublicKeyInfo and searches for |
| 42 // the private key half in the key database. Returns the private key on success |
| 43 // or nullptr on error. |
| 44 CRYPTO_EXPORT ScopedSECKEYPrivateKey |
| 45 FindNSSKeyFromPublicKeyInfo(const std::vector<uint8_t>& input); |
| 46 |
| 47 // Decodes |input| as a DER-encoded X.509 SubjectPublicKeyInfo and searches for |
| 48 // the private key half in the slot specified by |slot|. Returns the private key |
| 49 // on success or nullptr on error. |
| 50 CRYPTO_EXPORT ScopedSECKEYPrivateKey |
| 51 FindNSSKeyFromPublicKeyInfoInSlot(const std::vector<uint8_t>& input, |
| 52 PK11SlotInfo* slot); |
| 53 |
| 54 #endif // defined(USE_NSS_CERTS) |
| 55 |
| 56 } // namespace crypto |
| 57 |
| 58 #endif // CRYPTO_NSS_KEY_UTIL_H_ |
OLD | NEW |