Add public key and signature verification to browser-side API keys

content/common/experiments/api_key.h

Index: content/common/experiments/api_key.h
diff --git a/content/common/experiments/api_key.h b/content/common/experiments/api_key.h
index 6b06ea279c070871a45a32312fa53490b9a0a82e..08b6dfc87a9bb9b837806d6ea497f74fbbfeb0f7 100644
--- a/content/common/experiments/api_key.h
+++ b/content/common/experiments/api_key.h
@@ -56,6 +56,13 @@ class CONTENT_EXPORT ApiKey {
   bool ValidateOrigin(const std::string& origin) const;
   bool ValidateApiName(const std::string& api_name) const;
   bool ValidateDate(const base::Time& now) const;
+  bool ValidateSignature(const uint8_t* public_key,
+                         size_t public_key_length) const;
+
+  static bool ValidateSignature(const std::string& signature_text,
+                                const std::string& data,
+                                const uint8_t* public_key,
+                                size_t public_key_length);
 
  private:
   ApiKey(const std::string& signature,