| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "media/crypto/aes_decryptor.h" | 5 #include "media/crypto/aes_decryptor.h" |
| 6 | 6 |
| 7 #include <vector> | 7 #include <vector> |
| 8 | 8 |
| 9 #include "base/logging.h" | 9 #include "base/logging.h" |
| 10 #include "base/stl_util.h" | 10 #include "base/stl_util.h" |
| (...skipping 29 matching lines...) Expand all Loading... |
| 40 memcpy(dst, src, subsample.cypher_bytes); | 40 memcpy(dst, src, subsample.cypher_bytes); |
| 41 src += subsample.cypher_bytes; | 41 src += subsample.cypher_bytes; |
| 42 dst += subsample.cypher_bytes; | 42 dst += subsample.cypher_bytes; |
| 43 } | 43 } |
| 44 } | 44 } |
| 45 | 45 |
| 46 // Decrypts |input| using |key|. Returns a DecoderBuffer with the decrypted | 46 // Decrypts |input| using |key|. Returns a DecoderBuffer with the decrypted |
| 47 // data if decryption succeeded or NULL if decryption failed. | 47 // data if decryption succeeded or NULL if decryption failed. |
| 48 static scoped_refptr<DecoderBuffer> DecryptData(const DecoderBuffer& input, | 48 static scoped_refptr<DecoderBuffer> DecryptData(const DecoderBuffer& input, |
| 49 crypto::SymmetricKey* key) { | 49 crypto::SymmetricKey* key) { |
| 50 CHECK(input.GetDataSize()); | 50 CHECK(input.data_size()); |
| 51 CHECK(input.GetDecryptConfig()); | 51 CHECK(input.decrypt_config()); |
| 52 CHECK(key); | 52 CHECK(key); |
| 53 | 53 |
| 54 crypto::Encryptor encryptor; | 54 crypto::Encryptor encryptor; |
| 55 if (!encryptor.Init(key, crypto::Encryptor::CTR, "")) { | 55 if (!encryptor.Init(key, crypto::Encryptor::CTR, "")) { |
| 56 DVLOG(1) << "Could not initialize decryptor."; | 56 DVLOG(1) << "Could not initialize decryptor."; |
| 57 return NULL; | 57 return NULL; |
| 58 } | 58 } |
| 59 | 59 |
| 60 DCHECK_EQ(input.GetDecryptConfig()->iv().size(), | 60 DCHECK_EQ(input.decrypt_config()->iv().size(), |
| 61 static_cast<size_t>(DecryptConfig::kDecryptionKeySize)); | 61 static_cast<size_t>(DecryptConfig::kDecryptionKeySize)); |
| 62 if (!encryptor.SetCounter(input.GetDecryptConfig()->iv())) { | 62 if (!encryptor.SetCounter(input.decrypt_config()->iv())) { |
| 63 DVLOG(1) << "Could not set counter block."; | 63 DVLOG(1) << "Could not set counter block."; |
| 64 return NULL; | 64 return NULL; |
| 65 } | 65 } |
| 66 | 66 |
| 67 const int data_offset = input.GetDecryptConfig()->data_offset(); | 67 const int data_offset = input.decrypt_config()->data_offset(); |
| 68 const char* sample = | 68 const char* sample = |
| 69 reinterpret_cast<const char*>(input.GetData() + data_offset); | 69 reinterpret_cast<const char*>(input.data() + data_offset); |
| 70 int sample_size = input.GetDataSize() - data_offset; | 70 int sample_size = input.data_size() - data_offset; |
| 71 | 71 |
| 72 if (input.GetDecryptConfig()->subsamples().empty()) { | 72 if (input.decrypt_config()->subsamples().empty()) { |
| 73 std::string decrypted_text; | 73 std::string decrypted_text; |
| 74 base::StringPiece encrypted_text(sample, sample_size); | 74 base::StringPiece encrypted_text(sample, sample_size); |
| 75 if (!encryptor.Decrypt(encrypted_text, &decrypted_text)) { | 75 if (!encryptor.Decrypt(encrypted_text, &decrypted_text)) { |
| 76 DVLOG(1) << "Could not decrypt data."; | 76 DVLOG(1) << "Could not decrypt data."; |
| 77 return NULL; | 77 return NULL; |
| 78 } | 78 } |
| 79 | 79 |
| 80 // TODO(xhwang): Find a way to avoid this data copy. | 80 // TODO(xhwang): Find a way to avoid this data copy. |
| 81 return DecoderBuffer::CopyFrom( | 81 return DecoderBuffer::CopyFrom( |
| 82 reinterpret_cast<const uint8*>(decrypted_text.data()), | 82 reinterpret_cast<const uint8*>(decrypted_text.data()), |
| 83 decrypted_text.size()); | 83 decrypted_text.size()); |
| 84 } | 84 } |
| 85 | 85 |
| 86 const std::vector<SubsampleEntry>& subsamples = | 86 const std::vector<SubsampleEntry>& subsamples = |
| 87 input.GetDecryptConfig()->subsamples(); | 87 input.decrypt_config()->subsamples(); |
| 88 | 88 |
| 89 int total_clear_size = 0; | 89 int total_clear_size = 0; |
| 90 int total_encrypted_size = 0; | 90 int total_encrypted_size = 0; |
| 91 for (size_t i = 0; i < subsamples.size(); i++) { | 91 for (size_t i = 0; i < subsamples.size(); i++) { |
| 92 total_clear_size += subsamples[i].clear_bytes; | 92 total_clear_size += subsamples[i].clear_bytes; |
| 93 total_encrypted_size += subsamples[i].cypher_bytes; | 93 total_encrypted_size += subsamples[i].cypher_bytes; |
| 94 } | 94 } |
| 95 if (total_clear_size + total_encrypted_size != sample_size) { | 95 if (total_clear_size + total_encrypted_size != sample_size) { |
| 96 DVLOG(1) << "Subsample sizes do not equal input size"; | 96 DVLOG(1) << "Subsample sizes do not equal input size"; |
| 97 return NULL; | 97 return NULL; |
| 98 } | 98 } |
| 99 | 99 |
| 100 // The encrypted portions of all subsamples must form a contiguous block, | 100 // The encrypted portions of all subsamples must form a contiguous block, |
| 101 // such that an encrypted subsample that ends away from a block boundary is | 101 // such that an encrypted subsample that ends away from a block boundary is |
| 102 // immediately followed by the start of the next encrypted subsample. We | 102 // immediately followed by the start of the next encrypted subsample. We |
| 103 // copy all encrypted subsamples to a contiguous buffer, decrypt them, then | 103 // copy all encrypted subsamples to a contiguous buffer, decrypt them, then |
| 104 // copy the decrypted bytes over the encrypted bytes in the output. | 104 // copy the decrypted bytes over the encrypted bytes in the output. |
| 105 // TODO(strobe): attempt to reduce number of memory copies | 105 // TODO(strobe): attempt to reduce number of memory copies |
| 106 scoped_ptr<uint8[]> encrypted_bytes(new uint8[total_encrypted_size]); | 106 scoped_ptr<uint8[]> encrypted_bytes(new uint8[total_encrypted_size]); |
| 107 CopySubsamples(subsamples, kSrcContainsClearBytes, | 107 CopySubsamples(subsamples, |
| 108 reinterpret_cast<const uint8*>(sample), encrypted_bytes.get()); | 108 kSrcContainsClearBytes, |
| 109 reinterpret_cast<const uint8*>(sample), |
| 110 encrypted_bytes.get()); |
| 109 | 111 |
| 110 base::StringPiece encrypted_text( | 112 base::StringPiece encrypted_text( |
| 111 reinterpret_cast<const char*>(encrypted_bytes.get()), | 113 reinterpret_cast<const char*>(encrypted_bytes.get()), |
| 112 total_encrypted_size); | 114 total_encrypted_size); |
| 113 std::string decrypted_text; | 115 std::string decrypted_text; |
| 114 if (!encryptor.Decrypt(encrypted_text, &decrypted_text)) { | 116 if (!encryptor.Decrypt(encrypted_text, &decrypted_text)) { |
| 115 DVLOG(1) << "Could not decrypt data."; | 117 DVLOG(1) << "Could not decrypt data."; |
| 116 return NULL; | 118 return NULL; |
| 117 } | 119 } |
| 118 | 120 |
| 119 scoped_refptr<DecoderBuffer> output = DecoderBuffer::CopyFrom( | 121 scoped_refptr<DecoderBuffer> output = DecoderBuffer::CopyFrom( |
| 120 reinterpret_cast<const uint8*>(sample), sample_size); | 122 reinterpret_cast<const uint8*>(sample), sample_size); |
| 121 CopySubsamples(subsamples, kDstContainsClearBytes, | 123 CopySubsamples(subsamples, |
| 124 kDstContainsClearBytes, |
| 122 reinterpret_cast<const uint8*>(decrypted_text.data()), | 125 reinterpret_cast<const uint8*>(decrypted_text.data()), |
| 123 output->GetWritableData()); | 126 output->writable_data()); |
| 124 return output; | 127 return output; |
| 125 } | 128 } |
| 126 | 129 |
| 127 AesDecryptor::AesDecryptor(const KeyAddedCB& key_added_cb, | 130 AesDecryptor::AesDecryptor(const KeyAddedCB& key_added_cb, |
| 128 const KeyErrorCB& key_error_cb, | 131 const KeyErrorCB& key_error_cb, |
| 129 const KeyMessageCB& key_message_cb, | 132 const KeyMessageCB& key_message_cb, |
| 130 const NeedKeyCB& need_key_cb) | 133 const NeedKeyCB& need_key_cb) |
| 131 : key_added_cb_(key_added_cb), | 134 : key_added_cb_(key_added_cb), |
| 132 key_error_cb_(key_error_cb), | 135 key_error_cb_(key_error_cb), |
| 133 key_message_cb_(key_message_cb), | 136 key_message_cb_(key_message_cb), |
| 134 need_key_cb_(need_key_cb) { | 137 need_key_cb_(need_key_cb) {} |
| 135 } | |
| 136 | 138 |
| 137 AesDecryptor::~AesDecryptor() { | 139 AesDecryptor::~AesDecryptor() { STLDeleteValues(&key_map_); } |
| 138 STLDeleteValues(&key_map_); | |
| 139 } | |
| 140 | 140 |
| 141 bool AesDecryptor::GenerateKeyRequest(const std::string& type, | 141 bool AesDecryptor::GenerateKeyRequest(const std::string& type, |
| 142 const uint8* init_data, | 142 const uint8* init_data, |
| 143 int init_data_length) { | 143 int init_data_length) { |
| 144 std::string session_id_string(base::UintToString(next_session_id_++)); | 144 std::string session_id_string(base::UintToString(next_session_id_++)); |
| 145 | 145 |
| 146 // For now, the AesDecryptor does not care about |type|; | 146 // For now, the AesDecryptor does not care about |type|; |
| 147 // just fire the event with the |init_data| as the request. | 147 // just fire the event with the |init_data| as the request. |
| 148 std::string message; | 148 std::string message; |
| 149 if (init_data && init_data_length) { | 149 if (init_data && init_data_length) { |
| 150 message = std::string(reinterpret_cast<const char*>(init_data), | 150 message = |
| 151 init_data_length); | 151 std::string(reinterpret_cast<const char*>(init_data), init_data_length); |
| 152 } | 152 } |
| 153 | 153 |
| 154 key_message_cb_.Run(session_id_string, message, std::string()); | 154 key_message_cb_.Run(session_id_string, message, std::string()); |
| 155 return true; | 155 return true; |
| 156 } | 156 } |
| 157 | 157 |
| 158 void AesDecryptor::AddKey(const uint8* key, | 158 void AesDecryptor::AddKey(const uint8* key, |
| 159 int key_length, | 159 int key_length, |
| 160 const uint8* init_data, | 160 const uint8* init_data, |
| 161 int init_data_length, | 161 int init_data_length, |
| 162 const std::string& session_id) { | 162 const std::string& session_id) { |
| 163 CHECK(key); | 163 CHECK(key); |
| 164 CHECK_GT(key_length, 0); | 164 CHECK_GT(key_length, 0); |
| 165 | 165 |
| 166 // TODO(xhwang): Add |session_id| check after we figure out how: | 166 // TODO(xhwang): Add |session_id| check after we figure out how: |
| 167 // https://www.w3.org/Bugs/Public/show_bug.cgi?id=16550 | 167 // https://www.w3.org/Bugs/Public/show_bug.cgi?id=16550 |
| 168 if (key_length != DecryptConfig::kDecryptionKeySize) { | 168 if (key_length != DecryptConfig::kDecryptionKeySize) { |
| 169 DVLOG(1) << "Invalid key length: " << key_length; | 169 DVLOG(1) << "Invalid key length: " << key_length; |
| 170 key_error_cb_.Run(session_id, MediaKeys::kUnknownError, 0); | 170 key_error_cb_.Run(session_id, MediaKeys::kUnknownError, 0); |
| 171 return; | 171 return; |
| 172 } | 172 } |
| 173 | 173 |
| 174 // TODO(xhwang): Fix the decryptor to accept no |init_data|. See | 174 // TODO(xhwang): Fix the decryptor to accept no |init_data|. See |
| 175 // http://crbug.com/123265. Until then, ensure a non-empty value is passed. | 175 // http://crbug.com/123265. Until then, ensure a non-empty value is passed. |
| 176 static const uint8 kDummyInitData[1] = { 0 }; | 176 static const uint8 kDummyInitData[1] = {0}; |
| 177 if (!init_data) { | 177 if (!init_data) { |
| 178 init_data = kDummyInitData; | 178 init_data = kDummyInitData; |
| 179 init_data_length = arraysize(kDummyInitData); | 179 init_data_length = arraysize(kDummyInitData); |
| 180 } | 180 } |
| 181 | 181 |
| 182 // TODO(xhwang): For now, use |init_data| for key ID. Make this more spec | 182 // TODO(xhwang): For now, use |init_data| for key ID. Make this more spec |
| 183 // compliant later (http://crbug.com/123262, http://crbug.com/123265). | 183 // compliant later (http://crbug.com/123262, http://crbug.com/123265). |
| 184 std::string key_id_string(reinterpret_cast<const char*>(init_data), | 184 std::string key_id_string(reinterpret_cast<const char*>(init_data), |
| 185 init_data_length); | 185 init_data_length); |
| 186 std::string key_string(reinterpret_cast<const char*>(key) , key_length); | 186 std::string key_string(reinterpret_cast<const char*>(key), key_length); |
| 187 scoped_ptr<DecryptionKey> decryption_key(new DecryptionKey(key_string)); | 187 scoped_ptr<DecryptionKey> decryption_key(new DecryptionKey(key_string)); |
| 188 if (!decryption_key) { | 188 if (!decryption_key) { |
| 189 DVLOG(1) << "Could not create key."; | 189 DVLOG(1) << "Could not create key."; |
| 190 key_error_cb_.Run(session_id, MediaKeys::kUnknownError, 0); | 190 key_error_cb_.Run(session_id, MediaKeys::kUnknownError, 0); |
| 191 return; | 191 return; |
| 192 } | 192 } |
| 193 | 193 |
| 194 if (!decryption_key->Init()) { | 194 if (!decryption_key->Init()) { |
| 195 DVLOG(1) << "Could not initialize decryption key."; | 195 DVLOG(1) << "Could not initialize decryption key."; |
| 196 key_error_cb_.Run(session_id, MediaKeys::kUnknownError, 0); | 196 key_error_cb_.Run(session_id, MediaKeys::kUnknownError, 0); |
| 197 return; | 197 return; |
| 198 } | 198 } |
| 199 | 199 |
| 200 SetKey(key_id_string, decryption_key.Pass()); | 200 SetKey(key_id_string, decryption_key.Pass()); |
| 201 | 201 |
| 202 if (!new_audio_key_cb_.is_null()) | 202 if (!new_audio_key_cb_.is_null()) |
| 203 new_audio_key_cb_.Run(); | 203 new_audio_key_cb_.Run(); |
| 204 | 204 |
| 205 if (!new_video_key_cb_.is_null()) | 205 if (!new_video_key_cb_.is_null()) |
| 206 new_video_key_cb_.Run(); | 206 new_video_key_cb_.Run(); |
| 207 | 207 |
| 208 key_added_cb_.Run(session_id); | 208 key_added_cb_.Run(session_id); |
| 209 } | 209 } |
| 210 | 210 |
| 211 void AesDecryptor::CancelKeyRequest(const std::string& session_id) { | 211 void AesDecryptor::CancelKeyRequest(const std::string& session_id) {} |
| 212 } | |
| 213 | 212 |
| 214 Decryptor* AesDecryptor::GetDecryptor() { | 213 Decryptor* AesDecryptor::GetDecryptor() { return this; } |
| 215 return this; | |
| 216 } | |
| 217 | 214 |
| 218 void AesDecryptor::RegisterNewKeyCB(StreamType stream_type, | 215 void AesDecryptor::RegisterNewKeyCB(StreamType stream_type, |
| 219 const NewKeyCB& new_key_cb) { | 216 const NewKeyCB& new_key_cb) { |
| 220 switch (stream_type) { | 217 switch (stream_type) { |
| 221 case kAudio: | 218 case kAudio: |
| 222 new_audio_key_cb_ = new_key_cb; | 219 new_audio_key_cb_ = new_key_cb; |
| 223 break; | 220 break; |
| 224 case kVideo: | 221 case kVideo: |
| 225 new_video_key_cb_ = new_key_cb; | 222 new_video_key_cb_ = new_key_cb; |
| 226 break; | 223 break; |
| 227 default: | 224 default: |
| 228 NOTREACHED(); | 225 NOTREACHED(); |
| 229 } | 226 } |
| 230 } | 227 } |
| 231 | 228 |
| 232 void AesDecryptor::Decrypt(StreamType stream_type, | 229 void AesDecryptor::Decrypt(StreamType stream_type, |
| 233 const scoped_refptr<DecoderBuffer>& encrypted, | 230 const scoped_refptr<DecoderBuffer>& encrypted, |
| 234 const DecryptCB& decrypt_cb) { | 231 const DecryptCB& decrypt_cb) { |
| 235 CHECK(encrypted->GetDecryptConfig()); | 232 CHECK(encrypted->decrypt_config()); |
| 236 | 233 |
| 237 scoped_refptr<DecoderBuffer> decrypted; | 234 scoped_refptr<DecoderBuffer> decrypted; |
| 238 // An empty iv string signals that the frame is unencrypted. | 235 // An empty iv string signals that the frame is unencrypted. |
| 239 if (encrypted->GetDecryptConfig()->iv().empty()) { | 236 if (encrypted->decrypt_config()->iv().empty()) { |
| 240 int data_offset = encrypted->GetDecryptConfig()->data_offset(); | 237 int data_offset = encrypted->decrypt_config()->data_offset(); |
| 241 decrypted = DecoderBuffer::CopyFrom(encrypted->GetData() + data_offset, | 238 decrypted = DecoderBuffer::CopyFrom(encrypted->data() + data_offset, |
| 242 encrypted->GetDataSize() - data_offset); | 239 encrypted->data_size() - data_offset); |
| 243 } else { | 240 } else { |
| 244 const std::string& key_id = encrypted->GetDecryptConfig()->key_id(); | 241 const std::string& key_id = encrypted->decrypt_config()->key_id(); |
| 245 DecryptionKey* key = GetKey(key_id); | 242 DecryptionKey* key = GetKey(key_id); |
| 246 if (!key) { | 243 if (!key) { |
| 247 DVLOG(1) << "Could not find a matching key for the given key ID."; | 244 DVLOG(1) << "Could not find a matching key for the given key ID."; |
| 248 decrypt_cb.Run(kNoKey, NULL); | 245 decrypt_cb.Run(kNoKey, NULL); |
| 249 return; | 246 return; |
| 250 } | 247 } |
| 251 | 248 |
| 252 crypto::SymmetricKey* decryption_key = key->decryption_key(); | 249 crypto::SymmetricKey* decryption_key = key->decryption_key(); |
| 253 decrypted = DecryptData(*encrypted.get(), decryption_key); | 250 decrypted = DecryptData(*encrypted.get(), decryption_key); |
| 254 if (!decrypted.get()) { | 251 if (!decrypted.get()) { |
| 255 DVLOG(1) << "Decryption failed."; | 252 DVLOG(1) << "Decryption failed."; |
| 256 decrypt_cb.Run(kError, NULL); | 253 decrypt_cb.Run(kError, NULL); |
| 257 return; | 254 return; |
| 258 } | 255 } |
| 259 } | 256 } |
| 260 | 257 |
| 261 decrypted->SetTimestamp(encrypted->GetTimestamp()); | 258 decrypted->set_timestamp(encrypted->timestamp()); |
| 262 decrypted->SetDuration(encrypted->GetDuration()); | 259 decrypted->set_duration(encrypted->duration()); |
| 263 decrypt_cb.Run(kSuccess, decrypted); | 260 decrypt_cb.Run(kSuccess, decrypted); |
| 264 } | 261 } |
| 265 | 262 |
| 266 void AesDecryptor::CancelDecrypt(StreamType stream_type) { | 263 void AesDecryptor::CancelDecrypt(StreamType stream_type) { |
| 267 // Decrypt() calls the DecryptCB synchronously so there's nothing to cancel. | 264 // Decrypt() calls the DecryptCB synchronously so there's nothing to cancel. |
| 268 } | 265 } |
| 269 | 266 |
| 270 void AesDecryptor::InitializeAudioDecoder(const AudioDecoderConfig& config, | 267 void AesDecryptor::InitializeAudioDecoder(const AudioDecoderConfig& config, |
| 271 const DecoderInitCB& init_cb) { | 268 const DecoderInitCB& init_cb) { |
| 272 // AesDecryptor does not support audio decoding. | 269 // AesDecryptor does not support audio decoding. |
| (...skipping 41 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 314 const std::string& key_id) const { | 311 const std::string& key_id) const { |
| 315 base::AutoLock auto_lock(key_map_lock_); | 312 base::AutoLock auto_lock(key_map_lock_); |
| 316 KeyMap::const_iterator found = key_map_.find(key_id); | 313 KeyMap::const_iterator found = key_map_.find(key_id); |
| 317 if (found == key_map_.end()) | 314 if (found == key_map_.end()) |
| 318 return NULL; | 315 return NULL; |
| 319 | 316 |
| 320 return found->second; | 317 return found->second; |
| 321 } | 318 } |
| 322 | 319 |
| 323 AesDecryptor::DecryptionKey::DecryptionKey(const std::string& secret) | 320 AesDecryptor::DecryptionKey::DecryptionKey(const std::string& secret) |
| 324 : secret_(secret) { | 321 : secret_(secret) {} |
| 325 } | |
| 326 | 322 |
| 327 AesDecryptor::DecryptionKey::~DecryptionKey() {} | 323 AesDecryptor::DecryptionKey::~DecryptionKey() {} |
| 328 | 324 |
| 329 bool AesDecryptor::DecryptionKey::Init() { | 325 bool AesDecryptor::DecryptionKey::Init() { |
| 330 CHECK(!secret_.empty()); | 326 CHECK(!secret_.empty()); |
| 331 decryption_key_.reset(crypto::SymmetricKey::Import( | 327 decryption_key_.reset( |
| 332 crypto::SymmetricKey::AES, secret_)); | 328 crypto::SymmetricKey::Import(crypto::SymmetricKey::AES, secret_)); |
| 333 if (!decryption_key_) | 329 if (!decryption_key_) |
| 334 return false; | 330 return false; |
| 335 return true; | 331 return true; |
| 336 } | 332 } |
| 337 | 333 |
| 338 } // namespace media | 334 } // namespace media |
| OLD | NEW |