Implement ChannelIDVerifier using NSS.

net/quic/crypto/channel_id_openssl.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/crypto/channel_id.h"
 
 #include <openssl/bn.h>
 #include <openssl/ec.h>
 #include <openssl/ecdsa.h>
 #include <openssl/obj_mac.h>
 #include <openssl/sha.h>
 
 #include "crypto/openssl_util.h"
 
 using base::StringPiece;
 
 namespace net {
 
 // static
 bool ChannelIDVerifier::Verify(StringPiece key,
                                StringPiece signed_data,
                                StringPiece signature) {
+  return VerifyRaw(key, signed_data, signature, true);
+}
+
+// static
+bool ChannelIDVerifier::VerifyRaw(StringPiece key,
+                                  StringPiece signed_data,
+                                  StringPiece signature,
+                                  bool is_channel_id_signature) {
   if (key.size() != 32 * 2 ||
       signature.size() != 32 * 2) {
     return false;
   }
 
   crypto::ScopedOpenSSL<EC_GROUP, EC_GROUP_free> p256(
       EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1));
   if (p256.get() == NULL) {
     return false;
   }
@@ skipping 25 matching lines @@
 
   crypto::ScopedOpenSSL<EC_KEY, EC_KEY_free> ecdsa_key(EC_KEY_new());
   if (ecdsa_key.get() == NULL ||
       !EC_KEY_set_group(ecdsa_key.get(), p256.get()) ||
       !EC_KEY_set_public_key(ecdsa_key.get(), point.get())) {
     return false;
   }
 
   SHA256_CTX sha256;
   SHA256_Init(&sha256);
-  SHA256_Update(&sha256, ChannelIDVerifier::kContextStr,
-                strlen(ChannelIDVerifier::kContextStr) + 1);
-  SHA256_Update(&sha256, ChannelIDVerifier::kClientToServerStr,
-                strlen(ChannelIDVerifier::kClientToServerStr) + 1);
+  if (is_channel_id_signature) {
+    SHA256_Update(&sha256, kContextStr, strlen(kContextStr) + 1);
+    SHA256_Update(&sha256, kClientToServerStr, strlen(kClientToServerStr) + 1);
+  }
   SHA256_Update(&sha256, signed_data.data(), signed_data.size());
 
   unsigned char digest[SHA256_DIGEST_LENGTH];
   SHA256_Final(digest, &sha256);
 
   return ECDSA_do_verify(digest, sizeof(digest), &sig, ecdsa_key.get()) == 1;
 }
 
 }  // namespace net