OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #include "chrome/browser/password_manager/encryptor_password_mac.h" | |
6 | |
7 #import <Security/Security.h> | |
8 | |
9 #include "base/base64.h" | |
10 #include "base/mac/mac_logging.h" | |
11 #include "base/rand_util.h" | |
12 #include "crypto/apple_keychain.h" | |
13 #include "ui/base/l10n/l10n_util.h" | |
14 | |
15 using crypto::AppleKeychain; | |
16 | |
17 namespace { | |
18 | |
19 // Generates a random password and adds it to the Keychain. The added password | |
20 // is returned from the function. If an error occurs, an empty password is | |
21 // returned. | |
22 std::string AddRandomPasswordToKeychain(const AppleKeychain& keychain, | |
23 const std::string& service_name, | |
24 const std::string& account_name) { | |
25 // Generate a password with 128 bits of randomness. | |
26 const int kBytes = 128 / 8; | |
27 std::string password; | |
28 base::Base64Encode(base::RandBytesAsString(kBytes), &password); | |
29 void* password_data = | |
30 const_cast<void*>(static_cast<const void*>(password.data())); | |
31 | |
32 OSStatus error = keychain.AddGenericPassword(NULL, | |
33 service_name.size(), | |
34 service_name.data(), | |
35 account_name.size(), | |
36 account_name.data(), | |
37 password.size(), | |
38 password_data, | |
39 NULL); | |
40 | |
41 if (error != noErr) { | |
42 OSSTATUS_DLOG(ERROR, error) << "Keychain add failed"; | |
43 return std::string(); | |
44 } | |
45 | |
46 return password; | |
47 } | |
48 | |
49 } // namespace | |
50 | |
51 std::string EncryptorPassword::GetEncryptorPassword() const { | |
52 // These two strings ARE indeed user facing. But they are used to access | |
53 // the encryption keyword. So as to not lose encrypted data when system | |
54 // locale changes we DO NOT LOCALIZE. | |
55 const std::string service_name = "Chrome Safe Storage"; | |
56 const std::string account_name = "Chrome"; | |
57 | |
58 UInt32 password_length = 0; | |
59 void* password_data = NULL; | |
60 OSStatus error = keychain_.FindGenericPassword(NULL, | |
61 service_name.size(), | |
62 service_name.data(), | |
63 account_name.size(), | |
64 account_name.data(), | |
65 &password_length, | |
66 &password_data, | |
67 NULL); | |
68 | |
69 if (error == noErr) { | |
70 std::string password = | |
71 std::string(static_cast<char*>(password_data), password_length); | |
72 keychain_.ItemFreeContent(NULL, password_data); | |
73 return password; | |
74 } else if (error == errSecItemNotFound) { | |
75 return AddRandomPasswordToKeychain(keychain_, service_name, account_name); | |
76 } else { | |
77 OSSTATUS_DLOG(ERROR, error) << "Keychain lookup failed"; | |
78 return std::string(); | |
79 } | |
80 } | |
OLD | NEW |