Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(239)

Side by Side Diff: net/quic/crypto/crypto_utils.cc

Issue 13976007: Land Recent QUIC Changes (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Updated copyright notice Created 7 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « net/quic/crypto/crypto_utils.h ('k') | net/quic/quic_client_session.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "net/quic/crypto/crypto_utils.h" 5 #include "net/quic/crypto/crypto_utils.h"
6 6
7 #include "crypto/hkdf.h" 7 #include "crypto/hkdf.h"
8 #include "net/quic/crypto/crypto_handshake.h" 8 #include "net/quic/crypto/crypto_handshake.h"
9 #include "net/quic/crypto/crypto_protocol.h" 9 #include "net/quic/crypto/crypto_protocol.h"
10 #include "net/quic/crypto/quic_decrypter.h" 10 #include "net/quic/crypto/quic_decrypter.h"
11 #include "net/quic/crypto/quic_encrypter.h" 11 #include "net/quic/crypto/quic_encrypter.h"
12 #include "net/quic/crypto/quic_random.h" 12 #include "net/quic/crypto/quic_random.h"
13 #include "net/quic/quic_clock.h" 13 #include "net/quic/quic_time.h"
14 14
15 using base::StringPiece; 15 using base::StringPiece;
16 using std::string; 16 using std::string;
17 17
18 namespace net { 18 namespace net {
19 19
20 // static 20 // static
21 bool CryptoUtils::FindMutualTag(const CryptoTagVector& our_tags_vector, 21 bool CryptoUtils::FindMutualTag(const CryptoTagVector& our_tags_vector,
22 const CryptoTag* their_tags, 22 const CryptoTag* their_tags,
23 size_t num_their_tags, 23 size_t num_their_tags,
(...skipping 33 matching lines...) Expand 10 before | Expand all | Expand 10 after
57 } 57 }
58 } 58 }
59 return true; 59 return true;
60 } 60 }
61 } 61 }
62 } 62 }
63 63
64 return false; 64 return false;
65 } 65 }
66 66
67 void CryptoUtils::GenerateNonce(const QuicClock* clock, 67 void CryptoUtils::GenerateNonce(QuicTime::Delta now,
68 QuicRandom* random_generator, 68 QuicRandom* random_generator,
69 const string& orbit, 69 StringPiece orbit,
70 string* nonce) { 70 string* nonce) {
71 // a 4-byte timestamp + 28 random bytes. 71 // a 4-byte timestamp + 28 random bytes.
72 nonce->reserve(kNonceSize); 72 nonce->reserve(kNonceSize);
73 nonce->resize(kNonceSize); 73 nonce->resize(kNonceSize);
74 QuicTime::Delta now = clock->NowAsDeltaSinceUnixEpoch();
75 uint32 gmt_unix_time = now.ToSeconds(); 74 uint32 gmt_unix_time = now.ToSeconds();
76 memcpy(&(*nonce)[0], &gmt_unix_time, sizeof(gmt_unix_time)); 75 memcpy(&(*nonce)[0], &gmt_unix_time, sizeof(gmt_unix_time));
77 76
78 size_t bytes_written = sizeof(gmt_unix_time); 77 size_t bytes_written = sizeof(gmt_unix_time);
79 if (orbit.size() == 8) { 78 if (orbit.size() == 8) {
80 memcpy(&(*nonce)[bytes_written], orbit.data(), orbit.size()); 79 memcpy(&(*nonce)[bytes_written], orbit.data(), orbit.size());
81 bytes_written += orbit.size(); 80 bytes_written += orbit.size();
82 } 81 }
83 random_generator->RandBytes(&(*nonce)[bytes_written], 82 random_generator->RandBytes(&(*nonce)[bytes_written],
84 kNonceSize - bytes_written); 83 kNonceSize - bytes_written);
85 } 84 }
86 85
87 void CryptoUtils::DeriveKeys(QuicCryptoNegotiatedParameters* params, 86 void CryptoUtils::DeriveKeys(QuicCryptoNegotiatedParameters* params,
88 StringPiece nonce, 87 StringPiece client_nonce,
89 const string& hkdf_input, 88 const string& hkdf_input,
90 Perspective perspective) { 89 Perspective perspective) {
91 params->encrypter.reset(QuicEncrypter::Create(params->aead)); 90 params->encrypter.reset(QuicEncrypter::Create(params->aead));
92 params->decrypter.reset(QuicDecrypter::Create(params->aead)); 91 params->decrypter.reset(QuicDecrypter::Create(params->aead));
93 size_t key_bytes = params->encrypter->GetKeySize(); 92 size_t key_bytes = params->encrypter->GetKeySize();
94 size_t nonce_prefix_bytes = params->encrypter->GetNoncePrefixSize(); 93 size_t nonce_prefix_bytes = params->encrypter->GetNoncePrefixSize();
95 94
95 StringPiece nonce = client_nonce;
96 string nonce_storage;
97 if (!params->server_nonce.empty()) {
98 nonce_storage = client_nonce.as_string() + params->server_nonce;
99 nonce = nonce_storage;
100 }
101
96 crypto::HKDF hkdf(params->premaster_secret, nonce, 102 crypto::HKDF hkdf(params->premaster_secret, nonce,
97 hkdf_input, key_bytes, nonce_prefix_bytes); 103 hkdf_input, key_bytes, nonce_prefix_bytes);
98 if (perspective == SERVER) { 104 if (perspective == SERVER) {
99 params->encrypter->SetKey(hkdf.server_write_key()); 105 params->encrypter->SetKey(hkdf.server_write_key());
100 params->encrypter->SetNoncePrefix(hkdf.server_write_iv()); 106 params->encrypter->SetNoncePrefix(hkdf.server_write_iv());
101 params->decrypter->SetKey(hkdf.client_write_key()); 107 params->decrypter->SetKey(hkdf.client_write_key());
102 params->decrypter->SetNoncePrefix(hkdf.client_write_iv()); 108 params->decrypter->SetNoncePrefix(hkdf.client_write_iv());
103 } else { 109 } else {
104 params->encrypter->SetKey(hkdf.client_write_key()); 110 params->encrypter->SetKey(hkdf.client_write_key());
105 params->encrypter->SetNoncePrefix(hkdf.client_write_iv()); 111 params->encrypter->SetNoncePrefix(hkdf.client_write_iv());
106 params->decrypter->SetKey(hkdf.server_write_key()); 112 params->decrypter->SetKey(hkdf.server_write_key());
107 params->decrypter->SetNoncePrefix(hkdf.server_write_iv()); 113 params->decrypter->SetNoncePrefix(hkdf.server_write_iv());
108 } 114 }
109 } 115 }
110 116
111 } // namespace net 117 } // namespace net
OLDNEW
« no previous file with comments | « net/quic/crypto/crypto_utils.h ('k') | net/quic/quic_client_session.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698