| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "components/gcm_driver/crypto/encryption_header_parsers.h" | 5 #include "components/gcm_driver/crypto/encryption_header_parsers.h" |
| 6 | 6 |
| 7 #include "base/base64url.h" | 7 #include "base/base64url.h" |
| 8 #include "base/strings/string_number_conversions.h" | 8 #include "base/strings/string_number_conversions.h" |
| 9 #include "base/strings/string_piece.h" | 9 |
| 10 #include "base/strings/string_util.h" | 10 #include "base/strings/string_util.h" |
| 11 #include "net/http/http_util.h" | 11 |
| 12 | 12 |
| 13 namespace gcm { | 13 namespace gcm { |
| 14 | 14 |
| 15 namespace { | 15 namespace { |
| 16 | 16 |
| 17 // The default record size in bytes, as defined in section two of | 17 // The default record size in bytes, as defined in section two of |
| 18 // https://tools.ietf.org/html/draft-thomson-http-encryption-02. | 18 // https://tools.ietf.org/html/draft-thomson-http-encryption. |
| 19 const uint64_t kDefaultRecordSizeBytes = 4096; | 19 const uint64_t kDefaultRecordSizeBytes = 4096; |
| 20 | 20 |
| 21 // Decodes the string between |begin| and |end| using base64url, and writes the | 21 // Decodes the string in |value| using base64url and writes the decoded value to |
| 22 // decoded value to |*salt|. Returns whether the string could be decoded. | 22 // |*salt|. Returns whether the string is not empty and could be decoded. |
| 23 bool ValueToDecodedString(const std::string::const_iterator& begin, | 23 bool ValueToDecodedString(base::StringPiece value, std::string* salt) { |
| 24 const std::string::const_iterator& end, | |
| 25 std::string* salt) { | |
| 26 const base::StringPiece value(begin, end); | |
| 27 if (value.empty()) | 24 if (value.empty()) |
| 28 return false; | 25 return false; |
| 29 | 26 |
| 30 return base::Base64UrlDecode( | 27 return base::Base64UrlDecode( |
| 31 value, base::Base64UrlDecodePolicy::IGNORE_PADDING, salt); | 28 value, base::Base64UrlDecodePolicy::IGNORE_PADDING, salt); |
| 32 } | 29 } |
| 33 | 30 |
| 34 // Parses the record size between |begin| and |end|, and writes the value to | 31 // Parses the record size in |value| and writes the value to |*rs|. The value |
| 35 // |*rs|. The value must be an unsigned, 64-bit integer greater than zero that | 32 // must be a positive decimal integer greater than one that does not start |
| 36 // does not start with a plus. Returns whether the record size was valid. | 33 // with a plus. Returns whether the record size was valid. |
| 37 bool RecordSizeToInt(const std::string::const_iterator& begin, | 34 bool RecordSizeToInt(base::StringPiece value, uint64_t* rs) { |
| 38 const std::string::const_iterator& end, | |
| 39 uint64_t* rs) { | |
| 40 const base::StringPiece value(begin, end); | |
| 41 if (value.empty()) | 35 if (value.empty()) |
| 42 return false; | 36 return false; |
| 43 | 37 |
| 44 // Parsing the "rs" parameter uses stricter semantics than parsing rules for | 38 // Reject a leading plus, as the fact that the value must be positive is |
| 45 // normal integers, in that we want to reject values such as "+5" for | 39 // dictated by the specification. |
| 46 // compatibility with UAs that use other number parsing mechanisms. | |
| 47 if (value[0] == '+') | 40 if (value[0] == '+') |
| 48 return false; | 41 return false; |
| 49 | 42 |
| 50 if (!base::StringToUint64(value, rs)) | 43 uint64_t candidate_rs; |
| 44 if (!base::StringToUint64(value, &candidate_rs)) |
| 51 return false; | 45 return false; |
| 52 | 46 |
| 53 // The record size MUST be greater than 1. | 47 // The record size MUST be greater than one byte. |
| 54 return *rs > 1; | 48 if (candidate_rs <= 1) |
| 49 return false; |
| 50 |
| 51 *rs = candidate_rs; |
| 52 return true; |
| 55 } | 53 } |
| 56 | 54 |
| 57 // Parses the string between |input_begin| and |input_end| according to the | 55 } // namespace |
| 58 // extended ABNF syntax for the Encryption HTTP header, per the "parameter" | 56 |
| 59 // rule from RFC 7231 (https://tools.ietf.org/html/rfc7231). | 57 EncryptionHeaderIterator::EncryptionHeaderIterator( |
| 60 // | 58 std::string::const_iterator header_begin, |
| 61 // encryption_params = [ parameter *( ";" parameter ) ] | 59 std::string::const_iterator header_end) |
| 62 // | 60 : iterator_(header_begin, header_end, ','), |
| 63 // This implementation applies the parameters defined in section 3.1 of the | 61 rs_(kDefaultRecordSizeBytes) {} |
| 64 // HTTP encryption encoding document: | 62 |
| 65 // | 63 EncryptionHeaderIterator::~EncryptionHeaderIterator() {} |
| 66 // https://tools.ietf.org/html/draft-thomson-http-encryption-02#section-3.1 | 64 |
| 67 // | 65 bool EncryptionHeaderIterator::GetNext() { |
| 68 // This means that the three supported parameters are: | 66 keyid_.clear(); |
| 69 // | 67 salt_.clear(); |
| 70 // [ "keyid" "=" string ] | 68 rs_ = kDefaultRecordSizeBytes; |
| 71 // [ ";" "salt" "=" base64url ] | 69 |
| 72 // [ ";" "rs" "=" octet-count ] | 70 if (!iterator_.GetNext()) |
| 73 bool ParseEncryptionHeaderValuesImpl(std::string::const_iterator input_begin, | 71 return false; |
| 74 std::string::const_iterator input_end, | 72 |
| 75 EncryptionHeaderValues* values) { | |
| 76 net::HttpUtil::NameValuePairsIterator name_value_pairs( | 73 net::HttpUtil::NameValuePairsIterator name_value_pairs( |
| 77 input_begin, input_end, ';', | 74 iterator_.value_begin(), iterator_.value_end(), ';', |
| 78 net::HttpUtil::NameValuePairsIterator::Values::REQUIRED, | 75 net::HttpUtil::NameValuePairsIterator::Values::REQUIRED, |
| 79 net::HttpUtil::NameValuePairsIterator::Quotes::NOT_STRICT); | 76 net::HttpUtil::NameValuePairsIterator::Quotes::NOT_STRICT); |
| 80 | 77 |
| 81 while (name_value_pairs.GetNext()) { | 78 while (name_value_pairs.GetNext()) { |
| 82 const base::StringPiece name(name_value_pairs.name_begin(), | 79 const base::StringPiece name(name_value_pairs.name_begin(), |
| 83 name_value_pairs.name_end()); | 80 name_value_pairs.name_end()); |
| 81 const base::StringPiece value(name_value_pairs.value_begin(), |
| 82 name_value_pairs.value_end()); |
| 84 | 83 |
| 85 if (base::LowerCaseEqualsASCII(name, "keyid")) { | 84 if (base::LowerCaseEqualsASCII(name, "keyid")) { |
| 86 values->keyid.assign(name_value_pairs.value_begin(), | 85 value.CopyToString(&keyid_); |
| 87 name_value_pairs.value_end()); | |
| 88 } else if (base::LowerCaseEqualsASCII(name, "salt")) { | 86 } else if (base::LowerCaseEqualsASCII(name, "salt")) { |
| 89 if (!ValueToDecodedString(name_value_pairs.value_begin(), | 87 if (!ValueToDecodedString(value, &salt_)) |
| 90 name_value_pairs.value_end(), &values->salt)) { | |
| 91 return false; | 88 return false; |
| 92 } | |
| 93 } else if (base::LowerCaseEqualsASCII(name, "rs")) { | 89 } else if (base::LowerCaseEqualsASCII(name, "rs")) { |
| 94 if (!RecordSizeToInt(name_value_pairs.value_begin(), | 90 if (!RecordSizeToInt(value, &rs_)) |
| 95 name_value_pairs.value_end(), &values->rs)) { | |
| 96 return false; | 91 return false; |
| 97 } | |
| 98 } else { | 92 } else { |
| 99 // Silently ignore unknown directives for forward compatibility. | 93 // Silently ignore unknown directives for forward compatibility. |
| 100 } | 94 } |
| 101 } | 95 } |
| 102 | 96 |
| 103 return name_value_pairs.valid(); | 97 return name_value_pairs.valid(); |
| 104 } | 98 } |
| 105 | 99 |
| 106 // Parses the string between |input_begin| and |input_end| according to the | 100 CryptoKeyHeaderIterator::CryptoKeyHeaderIterator( |
| 107 // extended ABNF syntax for the Crypto-Key HTTP header, per the "parameter" rule | 101 std::string::const_iterator header_begin, |
| 108 // from RFC 7231 (https://tools.ietf.org/html/rfc7231). | 102 std::string::const_iterator header_end) |
| 109 // | 103 : iterator_(header_begin, header_end, ',') {} |
| 110 // encryption_params = [ parameter *( ";" parameter ) ] | 104 |
| 111 // | 105 CryptoKeyHeaderIterator::~CryptoKeyHeaderIterator() {} |
| 112 // This implementation applies the parameters defined in section 4 of the | 106 |
| 113 // HTTP encryption encoding document: | 107 bool CryptoKeyHeaderIterator::GetNext() { |
| 114 // | 108 keyid_.clear(); |
| 115 //https://tools.ietf.org/html/draft-thomson-http-encryption-02#section-4 | 109 aesgcm128_.clear(); |
| 116 // | 110 dh_.clear(); |
| 117 // This means that the three supported parameters are: | 111 |
| 118 // | 112 if (!iterator_.GetNext()) |
| 119 // [ "keyid" "=" string ] | 113 return false; |
| 120 // [ ";" "aesgcm128" "=" base64url ] | 114 |
| 121 // [ ";" "dh" "=" base64url ] | |
| 122 bool ParseCryptoKeyHeaderValuesImpl(std::string::const_iterator input_begin, | |
| 123 std::string::const_iterator input_end, | |
| 124 CryptoKeyHeaderValues* values) { | |
| 125 net::HttpUtil::NameValuePairsIterator name_value_pairs( | 115 net::HttpUtil::NameValuePairsIterator name_value_pairs( |
| 126 input_begin, input_end, ';', | 116 iterator_.value_begin(), iterator_.value_end(), ';', |
| 127 net::HttpUtil::NameValuePairsIterator::Values::REQUIRED, | 117 net::HttpUtil::NameValuePairsIterator::Values::REQUIRED, |
| 128 net::HttpUtil::NameValuePairsIterator::Quotes::NOT_STRICT); | 118 net::HttpUtil::NameValuePairsIterator::Quotes::NOT_STRICT); |
| 129 | 119 |
| 130 while (name_value_pairs.GetNext()) { | 120 while (name_value_pairs.GetNext()) { |
| 131 const base::StringPiece name(name_value_pairs.name_begin(), | 121 const base::StringPiece name(name_value_pairs.name_begin(), |
| 132 name_value_pairs.name_end()); | 122 name_value_pairs.name_end()); |
| 123 const base::StringPiece value(name_value_pairs.value_begin(), |
| 124 name_value_pairs.value_end()); |
| 133 | 125 |
| 134 if (base::LowerCaseEqualsASCII(name, "keyid")) { | 126 if (base::LowerCaseEqualsASCII(name, "keyid")) { |
| 135 values->keyid.assign(name_value_pairs.value_begin(), | 127 value.CopyToString(&keyid_); |
| 136 name_value_pairs.value_end()); | |
| 137 } else if (base::LowerCaseEqualsASCII(name, "aesgcm128")) { | 128 } else if (base::LowerCaseEqualsASCII(name, "aesgcm128")) { |
| 138 if (!ValueToDecodedString(name_value_pairs.value_begin(), | 129 if (!ValueToDecodedString(value, &aesgcm128_)) |
| 139 name_value_pairs.value_end(), | |
| 140 &values->aesgcm128)) { | |
| 141 return false; | 130 return false; |
| 142 } | |
| 143 } else if (base::LowerCaseEqualsASCII(name, "dh")) { | 131 } else if (base::LowerCaseEqualsASCII(name, "dh")) { |
| 144 if (!ValueToDecodedString(name_value_pairs.value_begin(), | 132 if (!ValueToDecodedString(value, &dh_)) |
| 145 name_value_pairs.value_end(), &values->dh)) { | |
| 146 return false; | 133 return false; |
| 147 } | |
| 148 } else { | 134 } else { |
| 149 // Silently ignore unknown directives for forward compatibility. | 135 // Silently ignore unknown directives for forward compatibility. |
| 150 } | 136 } |
| 151 } | 137 } |
| 152 | 138 |
| 153 return name_value_pairs.valid(); | 139 return name_value_pairs.valid(); |
| 154 } | 140 } |
| 155 | 141 |
| 156 } // namespace | |
| 157 | |
| 158 bool ParseEncryptionHeader(const std::string& input, | |
| 159 std::vector<EncryptionHeaderValues>* values) { | |
| 160 DCHECK(values); | |
| 161 | |
| 162 std::vector<EncryptionHeaderValues> candidate_values; | |
| 163 | |
| 164 net::HttpUtil::ValuesIterator value_iterator(input.begin(), input.end(), ','); | |
| 165 while (value_iterator.GetNext()) { | |
| 166 EncryptionHeaderValues candidate_value; | |
| 167 candidate_value.rs = kDefaultRecordSizeBytes; | |
| 168 | |
| 169 if (!ParseEncryptionHeaderValuesImpl(value_iterator.value_begin(), | |
| 170 value_iterator.value_end(), | |
| 171 &candidate_value)) { | |
| 172 return false; | |
| 173 } | |
| 174 | |
| 175 candidate_values.push_back(candidate_value); | |
| 176 } | |
| 177 | |
| 178 values->swap(candidate_values); | |
| 179 return true; | |
| 180 } | |
| 181 | |
| 182 bool ParseCryptoKeyHeader(const std::string& input, | |
| 183 std::vector<CryptoKeyHeaderValues>* values) { | |
| 184 DCHECK(values); | |
| 185 | |
| 186 std::vector<CryptoKeyHeaderValues> candidate_values; | |
| 187 | |
| 188 net::HttpUtil::ValuesIterator value_iterator(input.begin(), input.end(), ','); | |
| 189 while (value_iterator.GetNext()) { | |
| 190 CryptoKeyHeaderValues candidate_value; | |
| 191 if (!ParseCryptoKeyHeaderValuesImpl(value_iterator.value_begin(), | |
| 192 value_iterator.value_end(), | |
| 193 &candidate_value)) { | |
| 194 return false; | |
| 195 } | |
| 196 | |
| 197 candidate_values.push_back(candidate_value); | |
| 198 } | |
| 199 | |
| 200 values->swap(candidate_values); | |
| 201 return true; | |
| 202 } | |
| 203 | |
| 204 } // namespace gcm | 142 } // namespace gcm |
| OLD | NEW |