[webcrypto] Add raw symmetric key AES-KW wrap/unwrap for NSS.

content/renderer/webcrypto/webcrypto_util.h

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_RENDERER_WEBCRYPTO_WEBCRYPTO_UTIL_H_
 #define CONTENT_RENDERER_WEBCRYPTO_WEBCRYPTO_UTIL_H_
 
 #include <map>
 #include <string>
 #include <vector>
@@ skipping 114 matching lines @@
   // bytes.
   static Status ErrorIncorrectSizeAesCbcIv();
 
   // The data provided to an encrypt/decrypt/sign/verify operation was too
   // large. This can either represent an internal limitation (for instance
   // representing buffer lengths as uints), or an algorithm restriction (for
   // instance RSAES can operation on messages relative to the length of the
   // key's modulus).
   static Status ErrorDataTooLarge();
 
+  // The data provided to an encrypt/decrypt/sign/verify operation was too
+  // small. This usually represents an algorithm restriction (for instance
+  // AES-KW requires a minimum of 24 bytes input data).
+  static Status ErrorDataTooSmall();
+
   // Something was unsupported or unimplemented. This can mean the algorithm in
   // question was unsupported, some parameter combination was unsupported, or
   // something has not yet been implemented.
   static Status ErrorUnsupported();
 
   // Something unexpected happened in the code, which implies there is a
   // source-level bug. These should not happen, but safer to fail than simply
   // DCHECK.
   static Status ErrorUnexpected();
 
   // The authentication tag length specified for AES-GCM encrypt/decrypt was
   // either greater than 128 bits, or it was not a multiple of 8 bits.
   // (zero length is allowed).
   static Status ErrorInvalidAesGcmTagLength();
 
+  // The input data given to an AES-KW encrypt/decrypt operation was not a
+  // multiple of 8 bytes, as required by RFC 3394.
+  static Status ErrorInvalidAesKwDataLength();
+
   // The "publicExponent" used to generate a key was invalid: either no bytes
   // were specified, or the number was too large to fit into an "unsigned long"
   // (implemention limitation), or the exponent was zero.
   static Status ErrorGenerateKeyPublicExponent();
 
   // The algorithm was null when importing a raw-formatted key. In this case it
   // is required.
   static Status ErrorMissingAlgorithmImportRawKey();
 
   // The modulus bytes were empty when importing an RSA public key.
@@ skipping 96 matching lines @@
     uint8 tag_length_bytes);
 
 // Returns the internal block size for SHA-*
 unsigned int ShaBlockSizeBytes(blink::WebCryptoAlgorithmId hash_id);
 
 }  // namespace webcrypto
 
 }  // namespace content
 
 #endif  // CONTENT_RENDERER_WEBCRYPTO_WEBCRYPTO_UTIL_H_