[webcrypto] Validate JWK import of AES keys: key length must match algorithm.

content/renderer/webcrypto/webcrypto_util.h

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_RENDERER_WEBCRYPTO_WEBCRYPTO_UTIL_H_
 #define CONTENT_RENDERER_WEBCRYPTO_WEBCRYPTO_UTIL_H_
 
 #include <map>
 #include <string>
 #include <vector>
@@ skipping 65 matching lines @@
   static Status ErrorJwkAlgorithmMissing();
 
   // The "use" parameter was specified, however it couldn't be converted to an
   // equivalent Web Crypto usage.
   static Status ErrorJwkUnrecognizedUsage();
 
   // The "use" parameter was specified, however it is incompatible with that
   // specified by the Web Crypto import operation.
   static Status ErrorJwkUsageInconsistent();
 
-  // The "k" parameter was either missing, could not be parsed as a base-64
-  // encoded string, or the decoded bytes were empty.
+  // The "k" parameter was either missing or could not be parsed as a base-64
+  // encoded string.
   static Status ErrorJwkDecodeK();
 
-  // The "n" parameter was either missing, could not be parsed as a base-64
-  // encoded string, or the decoded bytes were empty.
+  // The "n" parameter was either missing or could not be parsed as a base-64
+  // encoded string.
   static Status ErrorJwkDecodeN();
 
-  // The "e" parameter was either missing, could not be parsed as a base-64
-  // encoded string, or the decoded bytes were empty.
+  // The "e" parameter was either missing or could not be parsed as a base-64
+  // encoded string.
   static Status ErrorJwkDecodeE();
 
   // TODO(eroman): Private key import through JWK is not yet supported.
   static Status ErrorJwkRsaPrivateKeyUnsupported();
 
   // The "kty" parameter was given and was a string, however it was
   // unrecognized.
   static Status ErrorJwkUnrecognizedKty();
 
+  // The amount of key data provided was incompatible with the selected
+  // algorithm. For instance if the algorith name was A128CBC then EXACTLY
+  // 128-bits of key data must have been provided. If 192-bits of key data were
+  // given that is an error.
+  static Status ErrorJwkIncorrectKeyLength();
+
   // ------------------------------------
   // Other errors
   // ------------------------------------
 
   // No key data was provided when importing an spki, pkcs8, or jwk formatted
   // key. This does not apply to raw format, since it is possible to have empty
   // key data there.
   static Status ErrorImportEmptyKeyData();
 
   // The wrong key was used for the operation. For instance, a public key was
@@ skipping 131 matching lines @@
     uint8 tag_length_bytes);
 
 // Returns the internal block size for SHA-*
 unsigned int ShaBlockSizeBytes(blink::WebCryptoAlgorithmId hash_id);
 
 }  // namespace webcrypto
 
 }  // namespace content
 
 #endif  // CONTENT_RENDERER_WEBCRYPTO_WEBCRYPTO_UTIL_H_